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COMPinERWORLD 


THE  NEWSPAPER  FOR  IT  LEADERS  »  WWW.COMPUTERWORLO.COM 


MAY  12,  2003  ■  VOL.  37  ■  NO.  19  •  S5/C0PY 


TARNISHED 


Budget  overruns,  project  failures 
and  lingering  resentment  over  the 
millions  of  dollars  spent  on  Y2k  are 
to  blame  for  IT’s  latest  credibility 
crisis.  Some  45%  of  CIOs  acknowl¬ 
edge  the  problem,  which  they  attribute  mostly  to  IT  being  too  slow  and  too  expen¬ 
sive.  To  turn  things  around,  IT  managers  are  focusing  more  on  short-term  ROI  and 
getting  business  units  more  involved  in  IT  planning  and  decision-making.  Page  37 


EDS  Sinks  Under  Weight  of  N/MCI  Anchor 


Problems  with  huge 
Navy  intranet  project 
take  $334  million  toll 

BY  DAN  VERTON 

Electronic  Data  Systems 
Corp.  last  week  reported  a 
quarterly  net  loss  of  $126  mil¬ 
lion,  blaming  “problem  con¬ 
tracts”  and  a  whopping  $334 
million  pretax  loss  stemming 
from  difficulties  with  the 
multibillion-dollar  Navy/Ma¬ 
rine  Corps  Intranet  program. 
Robert  Swan,  chief  finan- 


N/MCI:  What 

Went  Wrong? 

Quarter  ended  Dec.  31, 2002 

■  $70M  contribution  to  bottom  line 

But ... 

■  Average  seat  price  dropped  4% 

■  There  was  a  29%  reduction  in  the 
number  of  seats  that  transitioned  to 
N/MCI 

Quarter  ended  March  31,  2003 

■  S334M  pretax  loss 
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£ 
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cial  officer  at  EDS,  said  the 
two  primary  causes  of  the 
loss  associated  with  the 
N/MCI  contract  were  lower 
profit  margins  on  N/MCI 
seats  and  deployment  delays. 

The  average  N/MCI  seat 
price  dropped  by  4%,  a  sig¬ 
nificant  hit  resulting  from 
the  Navy’s  decision  to  place 
more  orders  for  cheaper 
N/MCI  seats  and  fewer  for 
higher-priced  seats  that  are 
configured  differently,  said 
Jeffrey  Baum,  an  EDS  spokes¬ 
man.  The  order  therefore  fell 
short  of  EDS  estimates  on 
the  number  of  high-margin 
seats  that  the  Navy  would 
require. 

That  shortfall  was  offset 
somewhat  by  a  recent  im¬ 
provement  in  the  number  of 
seats  deployed  and  conces¬ 
sions  from  EDS  subcontrac- 
N/MCI,  page  55 


PeopleSoft  Plans 
Technology  Blitz 
To  Simplify  Apps 

Vows  to  cut  installation,  integration  and 
upgrade  costs,  but  reveals  few  specifics 


BY  MARC  L.  SONGINI 

LAS  VEGAS 

PeopleSoft  Inc.  last  week 
outlined  an  initiative  to  re¬ 
duce  the  cost  of  installing 
its  business  applications, 
simplify  the  process  of  in¬ 
tegrating  them  with  other 
systems  and  streamline 
user  upgrades  of 
the  software. 

At  PeopleSoft’s 
2003  Leadership 
Summit  confer¬ 
ence  here,  the 
company  said  the  plan  also 
includes  the  development 
of  technologies  designed  to 
further  automate  its  soft¬ 
ware  support  operations 
and  improve  application 
quality  and  usability. 

Craig  Conway,  People¬ 
Soft’s  president  and  CEO, 


PeopleSoft  says 
it  will  port  all  of 
its  software  to 
Linux.  Page  55 


said  in  his  keynote  speech 
that  the  Pleasanton,  Calif.- 
based  software  vendor 
plans  to  spend  “hundreds 
of  millions  of  dollars”  on 
the  effort  over  the  next  few 
years.  Application  projects 
and  other  IT  operations  re¬ 
main  too  “people-inten¬ 
sive,”  he  added. 

PeopleSoft  ex¬ 
ecutives  didn’t 
disclose  much  in 
the  way  of  specif¬ 
ic  product  plans. 
But  their  vow  to  make  ap¬ 
plication  maintenance  and 
upgrades  less  of  a  chore 
struck  a  chord  with  Vicki 
Silvera,  director  of  infor¬ 
mation  systems  at  Vail  Re¬ 
sorts  Management  Co.  in 
Vail,  Colo. 

PeopleSoft,  page  55 


WLAN  Security  Still  Vexes  IT 

Shops  need  policies 
to  ban  rogue  access 
points,  IT  pros  say 


BY  BOB  BREWIN 

PALM  DESERT.  CALIF. 

Corporate  IT  managers 
continue  to  grapple  with 
wireless  LAN  security  is¬ 
sues,  including  the  battle 
against  the  installation  of 
unauthorized  WLAN  ac¬ 
cess  points  by  employees 
who  are  unmindful  of  the 
risks  such  links  can  pose. 


That  was  the  theme  re¬ 
peated  last  week  by  many 
attendees  at  Computer- 
world’  s  inaugural  Mobile  & 
Wireless  World  conference 
here.  About  200  high-level 
IT  executives  attended  the 
event. 

Tom  Dillon,  manager  of 
mobile  and  wireless  tech¬ 
nology  at  Hilton  Hotels 
Corp.  in  Beverly  Hills, 
Calif.,  said  the  manager  of 
a  Hilton  hotel  he  recently 
visited  assured  him  that 
WLAN  Security,  page  14 


Build  a  200-server  infrastructure 


Windows  Server  2003 


©  2003  Microsoft  Corporation.  All  rights  reserved.  Microsoft.  SQL  Server.  Windows,  and  the  Windows  logoare  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  m  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  maybeBtttfalemertsoftfterrespectweowneis 


Introducing  Microsoft  Windows  Server  2003.  Do  more  with  less. 


You're  being  asked  to  do  more.  You’re  being  asked  to  do  it  with  less.  Microsoft  Windows  Server  2003  is  designed  to  help  you 
manage  these  opposing  forces  with  powerful  server  consolidation  capabilities  that  increase  efficiency,  decrease  man-hours,  and 
lower  your  total  cost  of  ownership.  Get  your  free  evaluation  copy  of  Windows  Server  2003  at  microsoft.com/windowsseryef2003 

by  July  31,  2003.  Software  for  the  Agile  Business. 
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Information  Resources,  Inc.  (IRI)  manages  over  122  terabytes  of  data  to  provide  consumer  behavior  insights,  advanced  analytics,  and 
...  >1  decision  analysis  tools  for  some  of  the  largest  consumer  packaged  goods,  healthcare,  retail,  and  financial  companies  in  the  world:  To  meet 
/  '  .  increasing  demand  for  faster,  more  granular  business  intelligence  while  reducing  costs,  IRI  is  using  64-bit  editions  of  Windows  Serv&'f-2003 
and  SQL  Server'  2000  on  an  Intel  Itanium  2  system  to  deliver  faster  answers  to  its  customers.  The  result?  IRI  will  be  able  to  process  more 
queries,  using  a  fraction  of  the  number  of  servers  while  realizing  significant  cost  savings  and  improving  customer  service. 
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DEMAND 

OMPUTING 

IS  A  GREAT  IDEA. 


BUT  IF  YOU  CANT  MANAGE  IT, 
THAT'S  ALL  IT  WILL  BE. 


MANAGING  ON-DEMAND  COMPUTING 

We  have  seen  the  future  of  IT,  and  we're  delivering  it  today.  That's  why  we're  making  it  possible  to 
manage  on-demand  computing  right  now  with  our  products.  Our  latest  innovations  let  you  manage 
your  infrastructure  as  efficiently  and  reliably  as  a  utility.  They  help  your  infrastructure  manage  itself, 
so  you  can  focus  on  running  your  business.  And,  most  importantly,  they  give  you  insight  into  how 
your  infrastructure  is  supporting  your  business,  so  you  can  make  better  business  decisions 
and  improve  your  bottom  line.  To  wake  up  to  the  dream  of  managing  on-demand  computing, 
contact  us  today  at  ca.com/unicenterl . 


Unicenter®  Managing  Business  Infrastructure 


Computer  Associates® 


©2003  Computer  Associates  International,  Inc.  (CA).  All  rights  reserved. 
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Squandered  Opportunity 

In  the  Management  section:  Companies  invested  heavily 
in  IT  asset  management  prior  to  the  year  2000,  but  they  have 
largely  failed  to  make  long-term  improvements.  Here’s  how 
to  pick  up  the  pieces.  Page  42 
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Automated  to  the  Core 

In  the  Technoiogy  section:  Data  center  automa¬ 
tion  software  can  help  companies  cut  adminis¬ 
trative  costs  and  improve  efficiencies  at  the 
heart  of  the  IT  infrastructure.  But  beware  of 
immature  software.  Page  25 
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4  HP  touts  its  “adaptive  enter¬ 
prise”  strategy,  but  it  will  have 
to  distinguish  it  from  other 
vendors’  similar  offerings. 

5  Health  insurers  get  ready  for 
real-time  attack  surveillance 
as  the  Department  of  Home¬ 
land  Security  begins  a  bioter¬ 
rorism  exercise. 

5  AT&T  speeds  up  a  network 
expansion  in  50  countries 
in  the  face  of  stiff  competi¬ 
tion  in  the  IP  VPN  services 
market. 

6  LANDesk  releases  a  suite 
intended  to  make  hardware 
upgrades  easier. 

8  Event-driven  architecture 

will  be  the  next  big  thing  after 
Web  services,  says  Gartner. 

10  One-third  of  business  execs 

polled  say  they’re  dissatisfied 
with  the  performance  of  their 
IT  departments. 

12  Instant  messaging  security 

problems  prompt  companies 
to  adopt  commercial-grade 
products. 

14  An  Air  Force  logistics  unit 

installs  a  wireless  system 
to  track  spare  parts  and  cut 
repair  times. 

16  Aircraft  makers  turn  to  CRM 

applications  to  boost  sales 
and  improve  customer  service 
capabilities. 

18  Privacy  concerns  about 
federal  data  mining  plans  are 
unwarranted,  say  government 
officials. 


28  Wading  Into  IP  Telephony.  A 

hybrid  IP/PBX  approach  lets 
some  companies  ease  into  IP 
telephony  without  taking  an 
expensive  plunge. 

32  Future  Watch:  Computers 
That  Cajole.  Persuasive  tech¬ 
nologies  may  one  day  shape 
users’  attitudes  and  behavior. 

33  QuickStudy:  Fighting  Spam. 

Software  helps  companies 
keep  up  with  spammers’ 
changing  tactics. 

34  Security  Manager’s  Journal: 
Reserve  Call-up  Hits  IT  Se¬ 
curity  Department.  Mathias 
Thurman  struggles  to  keep  IT 
security  humming  after  being 
called  to  active  military  duty. 


MANAGEMENT 


37  Tarnished  Image.  Bud¬ 
get  overruns,  project  fail¬ 
ures  and  lingering  resent¬ 
ment  over  the  millions  spent 
on  Y2k  are  largely  to  blame 
for  IT’s  credibility  crisis. 

40  Singing  Your  Own 
Praises.  Internal  marketing 
programs  that  reinforce  IT’s 
value  can  help  buff  up  your 
department’s  reputation. 

44  Q&A:  Get  Over  Yourself.  The 

pervasiveness  of  IT  may  be 
making  it  strategically  irrele¬ 
vant,  according  to  Harvard 
Business  Review  editor 
Nicholas  G.  Carr,  who  says, 
“IT  management  should, 
frankly,  become  boring.” 


OPINIONS 

6  On  the  Mark:  Mark  Hall 

questions  whether  a  success¬ 
ful  ASP  has  really  proved  the 
business  model.  Also,  he  finds 
a  product  to  help  reduce  false 
positives  from  your  intrusion- 
detection  system. 

20  Patricia  Keefe  takes  excep¬ 
tion  to  Nicholas  G.  Carr’s 
claim  in  the  Harvard  Business 
Review  that  IT  doesn’t  matter. 

20  Pimm  Fox  argues  that  IT 
managers  who  don’t  deploy 
physical  security  technologies 
don’t  have  secure  systems. 

21  Michael  Gartenberg  explains 
why  large  and  small  compa¬ 
nies  should  roll  out  their 
Wi-Fi  networks  differently. 

35  Paul  A.  Strassmann  says  that 
Web  services  will  sound  the 
death  knell  of  monolithic  en¬ 
terprise  systems. 

46  Bart  Perkins  advises  buyers 
to  forget  phrases  like  “world- 
class  support.”  Contracts 
must  clearly  define  metrics 
for  supplier  performance  to 
be  measured  fairly. 

56  Frankly  Speaking:  Frank 
Hayes  reviews  the  results  of 
the  recent  ITAA  “2003  IT 
Workforce  Survey”  and  finds 
the  dark  cloud  surrounded  by 
the  report’s  silver  lining. 
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Web  Site  Privacy  Seals: 

Are  They  Worth  It? 

E-BUSINESS:  You’ve  seen  those  Truste  and 
BBB  privacy  logos  on  Web  sites.  Should  you 
get  one,  too?  Columnist  Jay  Cline  offers  some 
advice.  0  QuickLink  38299 

C#  Type  Conversions 

DEVELOPMENT:  Get  an  overview  of  possible 
type  conversions  in  the  C#  language. 

0  QuickLink  38291 

Hands  On:  Using  Imaging 
To  Deploy  Apple  Software 

MAC:  In  his  first  article  for  Computerworld.- 
com,  IT  professional  and  technology  writer 
Ryan  Faas  explains  how  to  deploy  copies  of  a 
master  disk  software  image  across  a  large 
number  of  Apple  computers. 

O  QuickLink  a3150 

Epicenter  of  the 
Real-Time  Enterprise 

SECURITY:  Federated  identities  hold  the  key 
to  helping  companies  control  growing 
amounts  of  information  from  employees, 
customers  and  partners,  says  Bill  Malik, 

CTO  at  Waveset  Technologies. 

0  QuickLink  37595 
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STORAGE:  The  storage  network  has  come 
into  its  own,  and  more  business  managers 
are  viewing  the  technology  as  a  long-term 
strategic  resource,  according  to  Eric  Blonda 
at  Sandial  Systems.  O  QuickLink  37642 
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Microsoft  Warns  of 
Passport  Raw 

Microsoft  Corp.  said  it  turned  off 
the  password-recovery  feature  in 
its  Passport  user  authentication 
service  after  being  informed  of  a 
security  flaw  that  attackers  could 
use  to  change  passwords.  By 
doing  so,  attackers  could  access 
credit  card  numbers  and  other 
personal  data,  the  company  said. 
Microsoft  added  that  it  would  re¬ 
store  the  feature  once  it  finishes 
developing  a  fix. 


Nasdaq  Delists  i2; 
Appeal  Planned 

Supply  chain  software  vendor  i2 
Technologies  Inc.  said  its  stock 
was  delisted  by  Nasdaq  Stock 
Market  Inc.  on  May  9,  four  weeks 
after  the  stock  market  warned 
that  it  planned  to  do  so.  The  trad¬ 
ing  of  i2’s  stock  had  been  halted 
since  March  31,  when  the  Dallas 
company  disclosed  that  it  was  be¬ 
ing  investigated  by  the  Securities 
and  Exchange  Commission.  12 
said  it  will  appeal  the  decision. 


SEC  Won’t  Ease 
E-mail  Storage  Rule 

The  SEC  denied  a  request  by  fi¬ 
nancial  services  firms  to  modify  a 
rule  that  requires  them  to  archive 
electronic  documents  on  WORM 
storage  devices,  which  have 
“write-once,  read-many”  capabil¬ 
ities  [QuickLink  37536].  In  re¬ 
sponse,  the  Securities  Industry 
Association  said  the  SEC  is  failing 
to  help  brokerages  cope  with  an 
explosion  in  the  use  of  e-mail. 


Sears  Taps  IBM 
Exec  for  IT  Job 

Sears,  Roebuck  and  Co.  named 
Cheryl  Murphy  vice  president  of 
IT  operations  and  engineering, 
with  responsibility  for  managing 
its  data  centers,  networks  and 
third-party  service  contracts. 
Murphy,  46,  will  report  to  CIO 
Gerald  Kelly.  She  had  worked  at 
IBM  since  1996,  most  recently  as 
its  principal  liaison  to  Sears. 


HP’s  Adaptive’  Strategy 
Faces  Challenging  Market 


Differentiating  plan 
from  those  of  rivals 
key  for  company 

BY  PATRICK  THIBODEAU 

SAN  JOSE 

AWRENCE  LINKENS, 
vice  president  of  IT  at 
Consolidated  Edison 
Communications  Inc., 
a  New  York-based  telecommu¬ 
nications  provider,  likes 
Hewlett-Packard  Co.  CEO 
Carly  Fiorina’s  vision  for  mak¬ 
ing  IT  responsive  to  changing 
business  needs. 

“She’s  hitting  the  nail  on  the 
head,”  Linkens  said  of  Fiori¬ 
na’s  plan,  detailed  last  week, 
to  focus  on  “adaptive”  tech¬ 
nologies  to  reduce  the  level  of 
IT  effort,  cost  and  risk  associ¬ 
ated  with  corporate  change. 
But  HP  faces  challenges  from 
IBM,  in  particular,  which  has  a 
similar  vision,  he  said. 

“There  are  two  ways  to  get 
at  the  same  solution,”  said 
Linkens.  “I  think  they  are  both 
working  toward  that  end.  And 
competition  is  good.” 

HP,  which  calls  its  plan  the 
“adaptive  enterprise,”  last 


week  waved  its  1-year-old 
union  with  Compaq  Computer 
Corp.  as  evidence  of  its  ability 
to  quickly  adapt  to  change.  As 
a  result  of  the  merger,  the 
combined  firms,  for  instance, 
cut  the  number  of  applications 
running  on  internal  systems 
from  7,000  to  5,000.  That,  to¬ 
gether  with  other  efficiencies, 
reduced  IT  costs  by  $3  billion. 

Fiorina  said  companies, 
whether  responding  to  new 
federal  regulations  or  to  com¬ 
petitive  pressures,  need  sim¬ 
plified,  standardized,  modu¬ 
larized  and  integrated  archi¬ 
tectures.  The  framework  HP 
is  building  to  address  those 
needs  will  be  anchored  by  an 
enterprise  architecture  strate¬ 
gy  called  Darwin. 

Other  IT  vendors  are  work¬ 
ing  on  similar  strategies,  and 
differentiating  the  vendors’ 
offerings  from  one  another 
will  be  difficult,  said  Paul  Ma¬ 
son,  an  analyst  at  IDC  in 
Framingham,  Mass. 

HP  “can  put  themselves  in  a 
very  strong  position,  and  so 
can  IBM,  obviously,”  said  Ma¬ 
son.  “So  it’s  going  to  be  a  mat¬ 
ter  of  who  executes  best.” 


With  its  Darwin  Reference 
Architecture,  HP 

a  virtual  server 
environment  for  managing  server 
resources  in  real  time  and  self- 
healing  software  that  automati¬ 
cally  detects  faults. 

D  “business 
agility  metrics"  for  assessing  a 
firm's  ability  to  respond  to  change. 

JG  with  Cisco. 
Oracle,  PeopleSoft,  SAP  and 
Siebel,  among  other  vendors. 


Aside  from  IBM,  Sun  Micro¬ 
systems  Inc.  has  developed  its 
N1  strategy  for  more  dynamic 
enterprise  management,  and 
Electronic  Data  Systems  Corp. 
has  its  “agile  enterprise” 
framework. 

In  an  announcement  last 
week  about  the  new  Power4+ 
processors  on  its  eServer 
pSeries  line,  IBM  said  it  added 
capacity-on-demand  functions 
that  allow  companies  to  pay 
for  processing  power  as  they 
need  it. 

One  pSeries  user,  Ed  Toben, 
the  CIO  at  New  York-based 


Colgate-Palmolive  Co.,  said 
the  on-demand  feature  “has  a 
lot  of  charm,”  particularly  for 
the  consumer  products  com¬ 
pany,  which  is  growing  and  of¬ 
ten  buys  hardware  in  anticipa¬ 
tion  of  future  needs.  He’s  in¬ 
terested  in  IBM’s  overall  on- 
demand  strategy,  but  “how 
you  get  there,  how  the  busi¬ 
ness  model  works,  the  pricing 
model . . .  still  need  to  be 
worked  out,”  he  said. 

HP  last  week  also  finalized 
a  $3  billion  services  agreement 
with  Procter  &  Gamble  Co.  in 
Cincinnati.  The  deal  will  af¬ 
fect  2,000  P&G  employees 
who  have  been  managing  the 
company’s  IT  infrastructure, 
data  center  operations,  desk¬ 
top  and  other  services  in  48 
countries.  They  will  become 
HP  employees  under  the 
agreement. 

Filippo  Passerini,  P&G’s 
global  business  services  offi¬ 
cer,  said  that  although  he  does 
have  a  high-level  understand¬ 
ing  of  HP’s  new  enterprise 
plan,  the  decision  to  outsource 
was  based  on  his  company’s 
15-year  relationship  with  HP. 

“I  don’t  think  one  can  ever 
bank  on  one  particular  new 
solution  for  a  strategic,  long¬ 
term  decision,”  said  Passerini, 
who  nonetheless  said  he  be¬ 
lieves  that  HP’s  enterprise 
strategy  will  add  value  to  the 
relationship.  I 


Step  1:  Hire  a  Consultant,  HP  ExASays 


In  an  interview 
last  week  with 
Computer- 
world's  Patrick 
Thibodeau, 
Juergen 
Rottler,  a  vice 
president  in 
HP's  services 
division,  dis¬ 
cussed  the  company’s  enterprise 
strategy.  Excerpts  follow: 

Your  major  competitors  are 
also  trying  to  persuade  users 
to  go  to  an  on-demand  model. 
Does  that  make  it  harder  to 
differentiate  HP  in  the  mar¬ 
ket?  Our  announcement  today 
isn’t  about  utility  computing 


alone,  per  se.  That’s  one  element 
within  it,  [but]  there's  a  broader 
view  that  you  need  to  connect 
business  with  IT.  When  you  talk 
about  a  pure  hardware  and  soft¬ 
ware  vendor,  that  is  more  of  a 
risk  to  you  than  if  you  are  a  broad 
vendor  who  has  a  strong  ser¬ 
vices  capability  and  can  basically 
be  the  provider  of  that  sourcing 
solution  called  utility  services. 

What’s  the  first  step  a  com¬ 
pany  should  take  in  adopting 
the  on-demand  model?  The 

first  thing  we  tell  customers  is 
not  to  immediately  jump  to  tech¬ 
nology.  What  you  want  to  under¬ 
stand  before  you  invest  in  any¬ 
thing  is  your  business  agility  - 


your  ability  to  respond  to  changes: 
how  quickly  you  can  respond, 
how  much  it  costs  to  respond 
and  what  skill  sets  you  need  to 
respond  to  change.  So  let  us 
come  in  and  do  an  assessment 
with  you.  It’s  an  investment  of 
$25,000.  We  will  profile  your 
current  environment:  we  will  help 
you  identify  where  you  weak¬ 
nesses  and  strengths  are. 

Must  companies  that  adopt 
your  adaptive  enterprise 
strategy  also  use  HP  serv¬ 
ices?  Are  you  locked  into  out¬ 
sourcing  to  HP  services?  No. 
Have  we  created  intellectual 
property  and  methodologies  that 
we  believe  are  highly  pragmatic  in 
terms  of  helping  you  move  to¬ 
ward  an  adaptive  enterprise?  Yes. 


Since  the  merger  with  Com¬ 
paq,  has  HP  had  difficulty 
reaching  all  of  its  customers 
to  explain  its  strategy? 

Customers  are  very  engaged  in 
driving  us  in  this  direction.  We 
have  done  a  very  good  job  reach¬ 
ing  out  to  our  largest  customers. 
The  results  that  we’re  getting 
from  our  midsize  customers  are 
actually  quite  good  as  well,  but 
they  are  directly  tied  to  the  on¬ 
going  sales  coverage  -  either 
through  HP  or  through  our  part¬ 
ners.  We  have  revamped  a  lot  of 
our  partnership  programs,  so 
whenever  you  revamp  programs, 
you  will  find  periods  where  things 
don’t  go  as  smooth  as  you  want. 
We’re  seeing  strong  positive 
feedback  to  the  new  partner 
model  that  we  have  put  in  place. 
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Feds,  Health  Insurers  Focus 
On  Sharing  Bioterror  Data 


Plan  mock  terrorist  attacks  to  evaluate 
medical  community’s  preparedness 


BY  DAN  VERTON 

WASHINGTON 

The  Department  of  Homeland 
Security  today  plans  to  begin  a 
five-day  exercise  to  test  gov¬ 
ernment  and  private-sector  in¬ 
formation-sharing  in  response 
to  mock  terrorist  attacks  in¬ 
volving  weapons  of  mass  de¬ 
struction. 

The  White  House  is  billing 
the  exercise,  called  TopOff  2 
(for  Top  Officials  2),  as  the 
most  comprehensive  terror¬ 
ism-response  exercise  ever 
undertaken  in  the  U.S.  It  will 
include  19  federal  agencies, 
the  American  Red  Cross,  and 
officials  from  Washington,  Illi¬ 
nois,  the  District  of  Columbia 
and  Canada.  The  scenario  will 
consist  of  near-simultaneous 
mock  attacks  involving  a  radi¬ 
ological  device  in  Seattle  and 
the  covert  release  of  a  biologi¬ 
cal  agent  in  Chicago. 

A  key  aspect  of  the  exercise 
will  be  the  ability  of  state  and 
local  officials  in  the  U.S.  and 
Canada  to  identify  medical  pa¬ 
tients  complaining  of  symp¬ 
toms  that  indicate  exposure  to 
a  biological  agent  and  to  com¬ 
municate  that  information  in  a 
timely  manner  to  other  federal 
and  state  officials. 

The  exercise  comes  as  the 
U.S.  health  insurance  industry 
nears  the  completion  of  a  pilot 
project  that  aims  to  create  a 
nationwide  data  mining,  sur¬ 
veillance  and  information¬ 
sharing  system  for  the  type  of 
regional  health  crisis  envi¬ 
sioned  in  TopOff  2. 

Relying  on  a  mix  of  private 
funding  and  a  $1.2  million 
grant  from  the  Atlanta-based 
Centers  for  Disease  Control 
and  Prevention,  four  member 
organizations  of  the  American 
Association  of  Health  Plans 
(AAHP)  are  testing  a  national 
bioterrorism  syndromic  sur¬ 
veillance  system  that  uses 
real-time  data  collected  from 


more  than  20  million  people 
in  all  50  states.  The  primary 
goal  of  the  program  is  to  “de¬ 
velop  and  implement  stan¬ 
dards,  protocols,  infrastruc¬ 
ture  and  analytic  tools  for  de¬ 
tecting  and  reporting  unusual 
geographic  clusters  of  symp¬ 
toms  or  complaints”  of  acute 
illness  that  might  indicate  that 
a  covert  bioterrorism  attack 
has  taken  place,  said  AAHP 
President  and  CEO  Karen  Ig- 
nagni,  during  a  May  5  House 
of  Representatives  hearing. 

Dr.  Jim  Norton,  program 
manager  at  project  participant 
HealthPartners  Inc.,  said  his 
Bloomington,  Minn.,  organiza¬ 
tion’s  mainframe-based  re¬ 


search  database  wasn’t  timely 
enough  to  meet  the  24-hour 
reporting  requirement  of  the 
surveillance  system.  As  a  re¬ 
sult,  a  significant  amount  of 
programming  was  required  to 
pull  the  data  out  of  the  med¬ 
ical  operations  mainframe,  put 
it  into  a  standard  file  format, 
strip  out  all  personally  identi¬ 
fying  information  and  assign 


geographic  and  demographic 
codes  to  each  patient. 

Transmitting  the  data  to  the 
central  server  operated  by 
Harvard  Pilgrim  Health  Care 
Inc.  in  Wellesley,  Mass.,  re¬ 
mains  a  36-hour  manual 
process,  he  said.  Once  fully 
automated,  reporting  will  oc¬ 
cur  every  24-hours.  Pattern- 
recognition  software  and 
trend  analysis  are  also  still 
works  in  progress,  said  Nor¬ 
ton.  Some  algorithms  have 
been  developed,  but  officials 
aren’t  satisfied  with  how  they 
handle  geographic  analysis  of 
outbreaks. 


HOW  IT  WORKS 


Debra  Ritzwoller,  clinical 
research  investigator  at  Kaiser 
Permanente  Colorado  in  Den¬ 
ver,  said  daily  encounters  with 
patients  are  scanned  for  a  set 
of  700  diagnosis  codes.  That 
data  is  then  grouped  into  syn¬ 
dromes  and  further  classified 
by  age,  sex  and  ZIP  code. 

“We  expect  to  be  able  to 
pick  up  something  two  or 
three  days  sooner  with  this 
system  than  you  would  by 
waiting  for  people  to  come 
into  emergency  rooms,”  said 
Norton.  “That  will  be  critical 
to  preventing  the  spread  of 
these  diseases.”  I 


Bioterror  Surveillance  at  Kaiser  Permanente 


. 

Clinics  fa 

"  record  diao- 


Automated 


record  diag¬ 
noses  using  a  list 
of  International 
Diagnosis  Codes. 


process 
extracts  codes 
daily  from  a 
Sybase  database. 


©IBM  Data 
Joiner  tech¬ 
nology  puts  data 
in  a  DB2  table. 


©Mainframe  batch 
job  evaluates  DB2 
table  and  creates  a  text 
file,  which  is  transferred  to 
a  server  that  generates 
summary  data  for  various 
categories  of  illness. 


©Summary 
data  with  geo¬ 
graphical  codes  is 
placed  in  XML  format 
and  transmitted  to  a 
secure  Web  site  at 
Harvard  Pilgrim. 


AT&T  Speeds  Up  Global 
Rollout  of  IP  VPN 

Carrier  establishes  consulting  team, 
plans  network  links  in  50-plus  countries 


BY  MATT  HAMBLEN 

AT&T  Corp.  last  week  out¬ 
lined  plans  to  expand  its  IP 
virtual  private  network  (VPN) 
services  globally,  partly  by  ac¬ 
celerating  an  ongoing  installa¬ 
tion  of  technology  based  on 
the  Multiprotocol  Label 
Switching  (MPLS)  standard. 

AT&T  is  speeding  up  a  roll¬ 
out  of  150  MPLS-based  net¬ 
work  points  of  presence  in 
more  than  50  countries  this 
year,  said  Mike  Jenner,  the 
company’s  vice  president  of 
global  IP  network  services.  In 
addition,  AT&T  has  formed  a 
500-person  VPN  integration 
consulting  team  and  has  made 
it  possible  for  customers  to  or¬ 
der  VPN  setups  and  other 
managed  Internet  services 
electronically,  Jenner  said. 

The  move  comes  as  AT&T 
readies  itself  for  a  market- 


share  battle  with  Baby  Bell 
companies  and  other  network 
service  providers  that  offer  IP 
VPN  capabilities,  said  Vijay 
Bhagavath,  an  analyst  at  For¬ 
rester  Research  Inc.  in  Cam¬ 
bridge,  Mass. 

“Everybody  and  his  mother 


What  to 
Ask  Yourself 


Before  choosing  a  VPN 
service,  companies  should 
answer  these  questions: 

■  Will  the  VPN  Include  over¬ 
seas  sites? 

■  Hew  much  network  band¬ 
width  do  you  need? 

■  Would  you  be  better  off  with 
a  meshed  architecture  or  a 
hub-and-spoke  architecture? 


SOURCE:  FORRESTER  RESEARCH  INC.. 
CAMBRIDGE.  MASS. 


has  an  IP  VPN  service,”  Bha¬ 
gavath  said.  As  a  result,  AT&T 
is  trying  to  show  that  it  has 
the  broadest  global  reach  and 
the  most  advanced  VPN  func¬ 
tionality,  he  explained.  VPN 
offerings  that  make  use  of 
MPLS  could  provide  users 
with  greater  scalability  and 
better  traffic  management  ca¬ 
pabilities  than  other  ap¬ 
proaches  do,  Bhagavath  said. 

Coverage  Considerations 

Antonio  Lopez,  marketing  di¬ 
rector  at  HIT  Rail  BV  in 
Utrecht,  Netherlands,  said  his 
company  in  February  went 
live  with  AT&T’s  IP  VPN  ser¬ 
vice  to  connect  26  data  centers 
in  15  European  countries. 

“We  picked  AT&T  because 
of  the  network  coverage  they 
have  in  Europe,”  Lopez  said. 
“Other  carriers  in  Europe 
don’t  cover  as  much  area  as 
AT&T,  even  though  they  claim 
they  do.  We  did  a  careful 
study.” 

HIT  Rail  is  jointly  owned  by 
15  railway  companies  and 
manages  IT  projects  for  them. 
The  IP  VPN  replaced  a  private 
network  based  on  the  X.25 


protocol  and  is  expected  to 
produce  annual  savings  of 
30%,  Lopez  said.  He  wouldn’t 
disclose  the  cost  of  AT&T’s 
service. 

Jenner  said  AT&T  will  make 
it  a  priority  to  provide  im¬ 
proved  VPN  provisioning  ser¬ 
vices.  The  company  and  its  ri¬ 
vals  have  faced  criticism  from 
large  users  regarding  their 
provisioning  capabilities.  “In 
general,  customers  voice  dis¬ 
satisfaction  even  with  AT&T 
...  on  provisioning,”  Jenner 
said. 

Telecommunications  carri¬ 
ers  like  AT&T  need  to  become 
more  knowledgeable  about 
business  applications  and  oth¬ 
er  technologies,  Bhagavath 
said.  “They  are  very  telecom- 
sawy,  but  they  have  to  train 
their  people  more  on  CRM,  IP 
and  Oracle  databases,  for  ex¬ 
ample,”  he  said. 

Another  thing  IP  VPN  cus¬ 
tomers  should  monitor  is  how 
well  carriers  work  with 
providers  of  last-mile  commu¬ 
nications  services,  because 
that’s  where  the  majority  of 
network  service  outages  oc¬ 
cur,  Bhagavath  added.  I 
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Microsoft,  HP 
Demo  PC  Prototype 

At  the  Windows  Hardware 
Engineering  Conference  last 
week  in  New  Orleans,  Microsoft 
Corp.  and  Hewlett-Packard  Co. 
demonstrated  a  prototype  desk¬ 
top  PC  that  included  a  23-inch 
flat-panel  display  and  built-in 
wireless  telephony  capabilities. 
HP  said  the  PC,  code-named 
Athens,  could  be  ready  as  early 
as  next  year. 


CSC  Team  Wins 
Royal  Mail  Pact 

A  team  of  IT  services  firms  led 
by  Computer  Sciences  Corp. 
(CSC)  said  they  have  signed  a 
10-year,  $2.4  billion  outsourcing 
contract  with  Royal  Mail  Group 
PLC,  the  U.K.  government’s  mail 
delivery  company.  CSC’s  part¬ 
ners  are  BT  Group  PLC  in  Lon¬ 
don  and  Xansa  PLC  in  Hemel 
Hempstead,  England.  About 
1,735  Royal  Mail  IT  staffers  will 
be  transferred  to  the  vendors, 
with  nearly  85%  of  them  shifting 
to  El  Segundo,  Calif.-based  CSC. 


Cisco’s  Profit  Up, 
But  Sales  Down 

Cisco  Systems  Inc.  reported  a 
$987  million  profit  for  its  third 
quarter,  which  ended  April  26.  It 
was  up  35%  from  $729  million 
a  year  ago,  but  revenue  dipped 
4%  from  $4.8  billion  to  $4.6  bil¬ 
lion.  Cisco  CEO  John  Chambers 
predicted  a  similar  revenue  total 
for  the  fourth  quarter  but  said 
he’s  slightly  more  optimistic 
about  the  general  economy. 


Short  Takes 

The  WORLD  WIDE  WEB  CONSOR¬ 
TIUM  released  a  proposed  revi¬ 
sion  of  the  SOAP  specification 

for  final  review _ PALM  INC.  in 

Miipitas,  Calif.,  said  Palm  OS- 
based  handheld  devices  will  now 
be  able  to  use  the  BlackBerry 
wireless  e-mail  software  devel¬ 
oped  by  RESEARCH  IN  MOTION 
LTD.  in  Waterloo,  Ontario. 


MARK  HALL  ■  ON  THE  MARK 

ASP  Turns  Financial 
Comer  and  Proves . . . 

. . .  the  business  model,  brags  John  Ottman,  executive  vice  president  of 
worldwide  markets  at  Corio  Inc.  Maybe,  maybe  not.  Ottman  says  the  San 
Carlos,  Calif.-based  application  service  provider  (ASP)  had  66%  rev¬ 
enue  growth  in  the  recent  quarter  over  the  same  period  last  year  and 
was  profitable  -  although  it  used  the  popular  dot-com  EBITDA  method  of 
adding  revenue  dollars  and  cents  without  subtracting  all  of  the  com¬ 
pany’s  real-world  expenses.  Still,  it’s  a  good  start.  It’s  especially  good 
when  you  consider  that  although  Corio  has  only  100  customers,  the 


same  as  it  did  about  three  years  ago,  these 
days  precious  few  are  dot-bombers.  Most 
of  the  new  customers  are  outfits  we’ve 
heard  of,  like  American  Express,  Pfizer 
and  the  U.S.  Coast  Guard.  The  ASP’s 
users  also  include  Carlson  Companies, 
one  of  the  largest  private  companies  in 
the  U.S.,  which  counts  Radisson  Hotels 
and  TGI  Friday’s  restaurants  among  its 
holdings.  But  when  CIO  Stephen  Brown 
explains  why  Corio  is 
good  for  his  company,  it 
doesn’t,  as  Ottman  would 
have  it,  “prove  the  busi¬ 
ness  model.”  Rather,  it 
proves  that  Corio  is  will¬ 
ing  to  flex  its  business 
model  to  get  and  keep 
customers.  According  to 
Brown,  Carlson  doesn’t  use 
Corio’s  data  center  to  host 
its  applications  —  which 
the  classic  ASP  business 
model  would  require.  In¬ 
stead,  it  exploits  Corio’s 
expertise,  leveraging  the 
ASP’s  technology  until  it 


can  train  its  own  IT  staff  on  how  to  run 
the  software.  Carlson  then  co-locates  the 
servers  in  its  own  data  center  in  its  Min¬ 
neapolis  headquarters.  Furthermore, 
even  Ottman  acknowledges  that  the  tra¬ 
ditional  ASP  model  of  demanding  that 
users  stick  to  cookie-cutter  versions  of 
an  application  is  out  the  window.  For  ex¬ 
ample,  Brown  wouldn’t  have  accepted  his 
PeopleSoft  application  from  Corio  with¬ 
out  substantial  rework 
for  Carlson’s  needs.  “We 
wanted  to  share  in  host¬ 
ing  and  customization  so 
we  would  have  the  skill 
sets  from  a  process  man¬ 
agement  point  of  view,” 
he  says.  Where  the  clas¬ 
sic  ASP  model  does  work 
well,  Brown  believes,  are 
cases  in  which  his  com¬ 
pany  needs  to  “get  re¬ 
sources  by  the  drink” 
from  Corio,  such  as  an 
extra  server  to  handle 
bigger  loads.  ■  Next 
month  Corio  will  be 


serving  up  another  drink  to  its  customers: 
a  new  single-sign-on  service  with  an  identity 
management  system.  Users  who  wander 
from  their  computers  for  too  long  will  be 
logged  off  all  their  open  apps.  But  the  sin¬ 
gle  sign-on  will  dull  that  pain.  Prosit.  ■ 
Monitoring  application  licenses  can  be  as 
tough  as  keeping  tabs  on  users’  access  to 
them.  LANDesk  Software  Inc.  in  South 
Jordan,  Utah,  has  for  years  been  helping 
IT  shops  comply  with  software  licenses, 
as  well  as  manage  the  deployment  of  soft¬ 
ware  across  the  network,  with  its  LAN¬ 
Desk  Management  Suite.  Following  to¬ 
day’s  announcement  (see  below),  Version 
7  will  hit  the  streets  May  15  with  support 
for  Mac  0$  X  clients  and  servers.  With  its 
profile-migration  capabilities,  applica¬ 
tion  settings  for  the  latest  versions  of  Mi¬ 
crosoft  Office,  Outlook  and  Internet  Ex¬ 
plorer  will  be  maintained  in  Version  7. 
Lotus  Notes  profile  migration  will  come 
in  July.  ■  Now  that  you’re  in  license  com¬ 
pliance  for  all  your  software,  it’s  time  to 
assure  that  you’re  in  policy  compliance  with 
regulations  such  as  HIPAA.  One  of  the  first 
out  of  the  gate  for  that  will  be  SecurityPro- 
filing  Inc.  in  Lafayette,  Ind.  CTO  Brett 
Oliphant  says  you  can  expect  the  compa¬ 
ny’s  Policy  Compliance  product  sometime 
this  summer.  SecurityProfiling  plans  to 
ship  Version  2  of  its  Intelligent  IDS  next 
month.  Oliphant  claims  that  intrusion- 
detection  systems  (IDS)  often  identify  up 
to  90%  false  positives,  making  these  security 
packages  essentially  useless,  since  systems 
administrators  cease  taking  the  tools  seri¬ 
ously.  The  new  release,  which  will  feature 
an  improved  user  interface  management 
console,  will  sort  through  every  suspect 
packet  using  Snort,  an  open-source  IDS, 
and  compare  those  packets  against  your 
application  portfolio.  At  least  then  you 
can  eliminate  all  those  potential  breaches 
of  no  consequence  to  your  network  and 
maybe  take  your  IDS  seriously  for  once.  I 


Next  month,  OS!  Software  Inc. 

in  San  Leandro,  Calif.,  will  an¬ 
nounce  its  PI  Server  3.4  real¬ 
time  database,  which  collects 
information  on  everything  from 
process  control  devices  in 
manufacturing  to  route  ;  and 
servers  on  yo  network.  The 
new  version  will  be  able  to  gulp 
down  data  on  more  than  1.7  mil¬ 
lion  elements  you  may  care  to 
monitor  -  up  from  200, 000  el 
ements  in  the  current  release. 


LANDesk  Eases  Hardware  Upgrade  Pains 


BY  MATT  HAMBLEN 

LANDesk  Software  Inc.  today 
plans  to  announce  a  revision 
of  its  hardware  management 
tools,  with  new  features  de¬ 
signed  to  help  IT  workers 
monitor  software  licenses  and 
migrate  end-user  settings  dur¬ 
ing  upgrades  of  PCs,  servers 
and  mobile  devices. 

Joe  Wang,  CEO  of  South  Jor¬ 
dan,  Utah-based  LANDesk, 
which  last  summer  was  spun 
off  from  Intel  Corp.,  said  the 
license  monitoring  functional¬ 
ity  built  into  LANDesk  Man¬ 


agement  Suite  7  can  help  IT 
managers  save  money  by  not 
renewing  unneeded  licenses. 

It  can  also  block  unauthorized 
applications  from  running,  via 
an  agent  that’s  installed  on 
computers  and  that  functions 
even  when  they’re  disconnect¬ 
ed  from  networks,  Wang  said. 

Denny  Cannon,  manager  of 
PC  integration  at  Farm  Credit 
Services  of  America  in  Oma¬ 
ha,  said  he  hopes  to  upgrade 
to  the  new  version  of  LAN¬ 
Desk  by  October.  Farm  Credit 
plans  to  replace  350  laptop 


PCs  next  year,  and  Cannon 
said  he  wants  to  use  the  soft¬ 
ware  to  lessen  the  need  for  IT 
staffers  to  manually  migrate 
e-mail  settings,  wallpaper  se¬ 
lections,  cookies  and  other 
end-user  preferences. 

In  March,  Farm  Credit  used 
an  earlier  version  of  LANDesk 
to  upgrade  550  desktop  PCs  at 
45  offices  in  four  states.  Can¬ 
non  said  the  process  took  only 
three  weeks,  compared  with  13 
weeks  for  similar  upgrades 
done  in  the  past.  With  LAN¬ 
Desk,  operating  systems  and 


applications  could  be  installed 
over  Farm  Credit’s  network 
without  IT  workers  having  to 
visit  each  site,  he  said. 

LANDesk’s  new  features  are 
“helpful  but  not  earth-shatter¬ 
ing  or  groundbreaking,”  said 
Fred  Broussard,  an  analyst  at 
IDC.  One  key  benefit  is  that 
LANDesk  users  can  get  a  suite 
of  products  “instead  of  cob¬ 
bling  together  products  from 
multiple  vendors,”  he  said.  I 


PROGRESS  REPORT 

Read  a  Q&A  with  LANDesk  CEO 
Joe  Wang  on  our  Web  site: 
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From  his  desk 
at  TrendLabs 
Los  Angeles, 
Ioseph  Miller,  Ph.D„ 
joins  a  team 
of  antivirus  experts 
working  worldwide 
to  uncover  data 
security  answers 
enterprise-wide. 


SMARTER  DATA  SECURITY  DOES  WHAT  SOFTWARE  ALONE  CAN'T:  Wherever  viruses  attack,  Trend  Micro 
is  near  at  hand  with  a  global  force  of  content  security  experts  backed  by  the  only  integrated  approach 
to  address  the  entire  attack  lifecycle.  Only  Trend  Micro"  Enterprise  Protection  Strategy  provides 
attack-specific  products  including  everything  from  Outbreak  Prevention  policies  to  Damage  Cleanup 
templates — all  delivered  while  the  attack  develops  so  you  can  better  manage  the  threat  and  minimize  costs. 
To  find  out  how  Trend  Micro's  best-of-breed  products  and  services  backed  by  the  vigilance  of  TrendLabs 
engineers  can  help  you  manage  every  stage  of  a  virus  outbreak,  visit  www.trendmicro.com/products/eps. 


source:  Gartner  inc  .  stamford.  conn 
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Event-Driven  Architecture 
Poised  for  Wide  Adoption 


Complex  event  processing  the  ‘next  big 
thing’  after  Web  services,  says  Gartner 


BY  CAROL  SLIWA 

LOS  ANGELES 

JUST  AS  MANY  IT  shops 
are  starting  to  get  their 
arms  around  the  service- 
oriented  architecture 
(SOA)  approach 
now  that  Web  services 
standards  are  emerg¬ 
ing,  there’s  already  a  “next 
big  thing”  on  the  develop¬ 
ment  horizon,  according  to 
Gartner  Inc. 

Four  years  from  now,  “mere 
mortals”  will  begin  to  adopt 
an  event-driven  architecture 
(EDA)  for  the  sort  of  complex 
event  processing  that  has  been 
attempted  only  by  software 
gurus  building  operating  sys¬ 
tems  or  systems  management 
tools,  and  sophisticated  devel¬ 
opers  at  financial  institutions, 
predicted  Roy  Schulte,  an  ana¬ 
lyst  at  Stamford,  Conn.-based 
Gartner,  which  held  its  Web 
Services  and  Application  Con- 


Service-Oriented 

Architecture 

SERVICE:  A  software  component, 
or  collection  of  software  compo¬ 
nents,  that  implements  a  reusable 
business  function,  such  as  adding  a 
new  customer  or  looking  up  a  cus¬ 
tomer’s  account  balance. 

SOA:  An  approach  for  designing 
and  building  applications  that  tie 
together  services,  which  are  defined 
by  their  interfaces.  The  SOA  ap¬ 
proach  has  gained  favor  with  com¬ 
panies  building  Web  services  inter¬ 
faces  to  new  and  existing  applica¬ 
tions  with  the  goal  of  enabling  them 
to  interoperate  or  be  combined  into 
new  composite  applications.  An 
SOA-based  application  consists  of 
components  that  supply  services 
and  other  programs  that  act  as 
clients,  or  “consumers,"  of  those 
services.  Because  the  components 
are  looseiy  coupled,  developers  can 
swap  one  for  another  without  con¬ 
cern  about  their  inner  workings. 


ference  here  last  week. 

Fortunately  for  IT  shops,  the 
EDA  approach  is  complemen¬ 
tary  to  SOA,  which  forward- 
thinking  IT  shops  are  starting 
to  employ  in  greater  numbers 
as  they  forge  ahead 
with  Web  services. 
Taking  an  SOA-based 
approach,  developers  build  an 
application  by  assembling 
“services,”  or  software  compo¬ 
nents  that  define  reusable 
business  functions. 

One  of  the  main  advantages 
of  the  SOA  approach  is  that  by 
building  standards-based  inter¬ 
faces  between  components,  de¬ 
velopers  can  incrementally 
construct  applications  and 
swap  out,  reuse  and  modify 
components  without  having  to 
concern  themselves  with  their 
inner  workings.  Those  who 
build  Web  services  typically 
describe  the  interfaces  using 
the  Web  Services  Definition 


Event-Driven 

Architecture 

SOFTWARE  EVENT:  An  object  that 
is  a  record  of  an  activity,  such  as 
the  opening  of  a  customer  account 
or  the  placing  of  an  order.  It's  not 
what  happened;  it’s  a  documenta¬ 
tion  of  what  happened. 

EDA:  An  approach  for  designing 
and  building  applications  in  which 
events  trigger  messages  to  be  sent 
between  independent  software 
modules  that  are  completely  un¬ 
aware  of  each  other  -  decoupled, 
as  opposed  to  the  loosely  coupled 
services  of  the  SOA-based  ap¬ 
proach.  An  event  source  typically 
sends  messages  to  middleware, 
and  the  middleware  matches  the 
messages  to  the  subscription  crite¬ 
ria  of  programs  that  want  to  be  no¬ 
tified  of  the  events.  Messages  are 
typically  sent  using  the  publish- 
and-subscribe  approach  because  it 
enables  simultaneous  delivery  to 
multiple  destinations. 


Language  and  send  XML-based 
messages  between  compo¬ 
nents  using  SOAP  over  HTTP. 

But  Schulte  said  connecting 
services  occurs  in  a  linear, 
predictable  sequence,  whereas 
an  event-driven  architecture 
allows  for  multiple,  less  pre¬ 
dictable,  asynchronous  events 
to  happen  in  parallel  and  trig¬ 
ger  a  single  action. 

Simple  event-driven  proc¬ 
essing  has  been  in  common 
use  for  at  least  10  years  with 
technology  such  as  IBM’s  or 
Tibco  Software  Inc.’s  message- 
oriented  middleware  and,  in 
the  past  few  years,  message- 
driven  Enterprise  JavaBeans, 
he  noted. 

But  Schulte  predicted  that 
complex  event  processing 
(CEP)  will  start  to  become 
mainstream  in  2007,  as  appli¬ 
cation  developers  and  systems 
and  business  analysts  strive  to 
do  more  business  in  real  time. 
Paving  the  way  for  the  trend 
will  be  faster  networks,  the  ar¬ 
rival  of  general-purpose  event 
management  software  tools 
and  the  emergence  of  stan¬ 
dards  for  event  processing  be¬ 
ginning  in  2005,  he  said. 

Hints  that  CEP  will  become 
mainstream  include  Palo  Alto, 
Calif.-based  Tibco’s  acquisi¬ 
tion  of  Praja  Inc.  and  IBM’s 
work  on  event-broker  technol¬ 
ogy,  Schulte  claimed.  “It’s  ob¬ 
viously  the  first  step  for  IBM, 
and  the  next  step  will  be  com¬ 
plex  event  processing,”  he  said. 

David  Luckham,  a  professor 
of  electrical  engineering  at 
Stanford  University  and  au¬ 
thor  of  a  book  on  CEP,  The 
Power  of  Events,  said  the  goal 
of  CEP  is  rather  simple:  deliv¬ 
ering  understandable  infor¬ 
mation  about  what’s  happen¬ 
ing  in  IT  systems.  That  infor¬ 
mation,  in  turn,  can  be  used 
for  a  variety  of  purposes, 
such  as  detecting  unusual 
activity,  improving  security 
and  recognizing  advantageous 
scenarios  in  CRM  and  supply- 
chain  systems. 

“The  events  in  IT  systems 


contain  untapped  informa¬ 
tion.  CEP  lets  you  extract  it 
and  use  it  in  ways  you  want 
to,”  he  said. 

Luckham  predicted  that 
CEP  will  start  creeping  into 
Web  services,  middleware  and 
application  servers  in  2005.  By 
2008,  he  foresees  the  emer¬ 
gence  of  CEP  standards,  lan¬ 
guages  and  complex  event- 
pattern  search  engines.  Ubiq¬ 
uity  of  CEP  will  come  in  2012, 
he  forecasted. 

To  prepare  for  EDA,  Schulte 
advised  companies  to  look  at 
their  application  requirements 


to  see  if  there  are  places  where 
they  could  do  simple  event 
processing  instead  of  SOA  to 
design  part  of  an  application. 
Leading-edge  companies 
should  also  look  to  implement 
complex  event  processing  for 
applications  that  bring  a  com¬ 
petitive  advantage,  he  said. 

Meanwhile,  users  who  still 
haven’t  adopted  SOA  are  trying 
to  sort  it  all  out.  “Before  you 
get  time  to  deploy  one  thing, 
the  next  thing’s  already  out," 
said  Vito  Iannuzzelli,  a  senior 
systems  architect  at  New  Jer¬ 
sey  Manufacturers  Insurance 
Co.  in  West  Trenton,  N.J.  I 
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IT  Managers  Still  Working  on  SOA 


Gartner  Inc.  may  see  event- 
driven  architecture  as  the  “next 
big  thing,”  but  plenty  of  IT  man¬ 
agers  are  still  struggling  to  lay 
down  the  foundation  for  the 
current  one  -  service-oriented 
architecture  (SOA). 

Gartner  analyst  Daryl  Plum¬ 
mer  estimates  that  no  more 
than  30%  of  IT  shops  are  do¬ 
ing  SOA-based  development  by 
design,  and  among  that  group, 
less  than  half  are  doing  it  con¬ 
sistently  well.  But  he  predicted 
that  85%  will  be  building  appli¬ 
cations  using  SOA  concepts 
five  years  from  now. 

“It’s  too  early  for  us,”  said 
Glyn  Crocker,  e-business  appli¬ 
cations  manager  at  Shell  Oil 
Products  US  in  Houston.  But 
he  said  he  does  see  opportu¬ 
nity  “to  bring  quick  business 
value  without  having  to  rewrite 
legacy  applications.” 

Robert  McCarlie,  a  group 
manager  in  the  e-business 
group  at  Royal  Bank  of  Canada 
in  Toronto,  said  his  company  is 
in  the  “education  phase,"  still 
figuring  out  what  it  might  do 
with  Web  services.  “But  the 
concept  of  being  able  to  loose¬ 
ly  couple  legacy  applications  is 
quite  interesting,"  he  said,  even 
though  Web  services  security  is 
still  immature  and  loose  cou¬ 
pling  and  the  “verbosity  of 


XML”  cause  performance  hits. 

The  SOA  concept  isn’t  new, 
but  SOA  has  become  a  buzz¬ 
word  now  that  Web  services 
are  hitting  the  mainstream.  Ser¬ 
vices  are  exposed  to  one  an¬ 
other  through  standards-based 
interfaces,  and  SOAP  is  used 
to  send  XML-based  messages 
between  them.  Because  com¬ 
ponents  are  loosely  coupled, 
developers  can  easily  swap 
them  out  and,  in  theory,  gain 
the  benefit  of  code  reuse. 

But  several  IT  managers  said 
they  won’t  be  holding  out  high 
hopes  for  code  reuse.  “It’s  a 
major  culture  change  because 
people  have  to  be  willing  to 
share  and  use  someone  else’s 
code,”  said  David  Wei,  applica¬ 
tion  development  manager  at 
SDG&E,  a  unit  of  San  Diego- 
based  Sempra  Energy. 

“It’s  an  ego  thing,”  said 
Xavier  Soosai,  a  senior  manag¬ 
er  and  IT  architect  at  Farmers 
Insurance  Group  of  Companies 
in  Los  Angeles.  He  said  he 
would  expect  no  more  than 
60%  reuse  -  “100%  reuse  is 
not  realistic."  Soosai  said  Farm¬ 
ers  will  use  the  SOA  approach 
“just  where  it  makes  sense” 
and  won’t  replace  existing  code 
with  new  Web  services  be¬ 
cause  that  would  be  expensive. 

-  Carol  Sliwa 
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Introducing  Nokia  Message  Protector. 


Nokia  is  a  recognized  leader  in  providing  enter¬ 
prise  network  security  solutions.  From  banking 
and  education  to  health  care  and  insurance,  we 
have  the  solutions  that  ensure  your  network 
integrity  and  maximize  your  connectivity  and  ROI. 
Nokia  Message  Protector  integrates  industry¬ 
leading  virus  protection  technology  from 
Trend  Micro™,  with  spam  rejection,  content 
management  and  exploit  rejection  technology, 


to  bring  you  best-of-breed  email  protection.  With 
the  ability  to  process  up  to  120,000  emails  per 
hour,  and  the  intelligence  to  control  all  the 
content  that  enters,  flows  within  and  leaves  the 
enterprise  mail  network,  exploits  can  be 
dramatically  reduced.  And  that  frees  you  to  focus 
on  driving  business  growth. 

If  you’d  like  to  get  out  more,  visit 
www.nokia.com/get_a_life/americas 
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Survey  Points  to  Continuing 
Friction  Between  Business,  IT 

One-third  of  polled  business  execs  say 
they’re  not  satisfied  with  their  IT  units 


BY  THOMAS  HOFFMAN 

NE-THIRD  of  437 
business  executives 
surveyed  recently 
by  Forrester  Re¬ 
search  Inc.  said  they’re  dissat¬ 
isfied  with  the  performance  of 
their  IT  departments.  But 
some  IT  managers  and  ana¬ 
lysts  last  week  said  the  results 
aren’t  surprising  —  and  may 
actually  represent  an  improve¬ 
ment  in  IT’s  standing. 

The  survey,  which  was  re¬ 
leased  by  Cambridge,  Mass.- 
based  Forrester  last  month, 
also  found  that  dissatisfied 
business  managers  are  more 
likely  to  fight  with  IT  depart¬ 
ments  for  control  of  technol¬ 
ogy  initiatives.  Moreover,  the 
unhappy  business  executives 
think  that  their  companies  lag 
others  in  adopting  new  tech¬ 
nologies  and  face  higher  IT 
project  failure  rates,  said  For¬ 
rester  analyst  Meredith  Child. 

Because  this  was  the  first 
time  Forrester  posed  these 
questions  to  business  leaders, 
it’s  hard  to  say  whether  the 
survey  results  signal  an  im¬ 
provement  or  a  decline  in  sat¬ 
isfaction  with  IT.  But  “if  you 
ran  this  study  in  1995, 1  bet  the 
numbers  might  be  flipped  — 
that  66%  would  have  been  dis¬ 
satisfied  with  their  IT  groups,” 
said  Steve  Andriole,  a  senior 
consultant  at  Cutter  Consor¬ 
tium  in  Arlington,  Mass.,  and 
an  IT  management  professor 
at  Villanova  University  in 
Pennsylvania. 

Since  the  economy’s  rapid 
growth  came  to  a  halt  in  late 
2000,  IT  managers  have  had 
to  work  more  closely  with 
business  units  to  cost-justify 
technology'  investments,  An¬ 
driole  said.  CIOs  “have  gotten 
smarter  about  defending  their 
IT  budgets,”  he  added. 

Others  were  a  bit  more 
skeptical  about  the  survey  re¬ 
sults.  “This  is  a  subject  that 


goes  a  lot  deeper  than  some  of 
the  simple  correlations  that 
[Forrester]  built,”  said  Cedric 
Rhoads,  former  director  of 
information  systems  at  Mat¬ 
sushita  Avionics  Systems 
Corp.,  a  Bothell,  Wash.-based 
company  that  develops  in¬ 
flight  communications  and 
entertainment  systems  for  the 
airline  industry. 

Two  months  ago,  Rhoads 
became  a  product  manager  for 
a  new  group  that  Matsushita 
Avionics  formed  two  months 
ago  to  develop  ground-based 
technologies  like  passenger 


BY  LUCAS  MEARIAN 

LAS  VEGAS 

Veritas  Software  Corp.  last 
week  detailed  plans  to  use  an 
upcoming  IT  cost-allocation 
tool  and  technology  from  two 
acquisitions  as  the  center- 
pieces  of  a  product  line  that 
can  be  used  to  manage  com¬ 
puter  resources  as  a  utility. 

Mountain  View,  Calif.-based 
Veritas,  which  made  the  an¬ 
nouncement  at  its  Vision  2003 
user  conference  here,  became 
the  latest  IT  vendor  to  target 
utility,  or  on-demand,  comput¬ 
ing.  Company  officials  said 
Veritas  will  support  storage 
virtualization,  automated 
hardware  provisioning,  sys¬ 
tem-performance  manage¬ 
ment  and  business-unit 
chargeback  capabilities. 

Several  conference  atten¬ 
dees  said  tight  IT  budgets  are 
forcing  them  to  try  to  do  more 
with  less.  Management  soft¬ 
ware  like  the  tools  promised 
by  Veritas  could  help  make 
that  possible,  they  added. 

Richard  Guetzloff,  senior  di¬ 
rector  of  enterprise  systems  at 


TIPS 


How  to  Keep 
Business  Managers 
Happy 

■  Place  IT  workers  directly  into 
business  units  to  help  them  better 
understand  business  needs. 


■  Look  at  business  units  as 

partners,  not  as  customers  under 
a  master/servant  relationship. 


■  Make  sure  business 
managers  are  involved  in 
testing  new  applications. 


■  Don’t  focus  only  on  IT  infra¬ 
structure;  help  your  company 
identify  growth  opportunities. 


R.R.  Donnelley  &  Sons  Co.  in 
Chicago,  said  he  has  been  talk¬ 
ing  to  Veritas  since  December 
about  the  new  product  suite 
because  he  wants  to  more 
effectively  automate  manage¬ 
ment  of  about  30  storage-area 
networks  (SAN). 

The  SANs  have  a  total  ca¬ 
pacity  of  150TB  and  support 
about  800  application  servers 
at  R.R.  Donnelley,  which  pro¬ 
vides  printing,  content  man¬ 
agement  and  distribution  ser¬ 
vices  to  publishers,  retailers 
and  other  companies. 

Goal:  One  Day  of  Training 

Guetzloff  said  his  goal  is  to 
install  a  central  management 
console  for  provisioning  IT  re¬ 
sources.  “I’m  really  looking  at 
how  to  make  it  simpler,  so  that 
with  a  day  of  training,  anyone 
can  do  this  from  an  operating 
perspective,”  he  said. 

Until  now,  Veritas  has  fo¬ 
cused  on  storage  management 
tools.  But  earlier  this  year,  the 
company  said  it  was  looking  to 
expand  into  other  IT  manage¬ 
ment  technologies,  a  strategy 


personalization  systems.  Be¬ 
fore  that,  he  helped  create  an 
IT  steering  committee  that  in¬ 
cludes  executives  from  the 
company’s  five  major  business 
units  plus  its  chief  financial 
and  technology  officers. 

The  steering  committee  is 
developing  a  framework  for 
reviewing,  funding  and  track¬ 
ing  IT  projects,  Rhoads  said. 
Previously,  the  company’s  IT 
department  “had  a  history  of 
working  in  the  background,” 
he  noted. 

Alignment  between  business 
units  and  IT  is  an  age-old  prob¬ 
lem,  said  John  Parkinson,  chief 
technologist  at  Cap  Gemini 
Ernst  &  Young’s  Americas  divi¬ 
sion  in  Chicago.  “Why  would 


fueled  partly  by  acquisitions 
that  were  announced  late  last 
year  [QuickLink  36722]. 

A  purchase  of  Westwood, 
Mass.-based  Precise  Software 
Solutions  Inc.  that’s  due  to  be 
completed  next  month  will 
give  Veritas  new  performance 
management  tools.  Veritas 
also  is  integrating  a  server 
provisioning  application  that 
it  bought  in  its  December  ac¬ 
quisition  of  Sunnyvale,  Calif.- 
based  Jareva  Technologies  Inc. 

The  acquired  products  are 
due  to  be  joined  later  this  year 


New  Products 

■  OpForce,  a  server  provisioning 
tool  that  will  be  released  in  the 
third  quarter  and  integrated  with 
the  company's  full  management 
suite  by  year’s  end. 

■  Application  performance 
management  software  that’s 
due  to  become  available  as  a 
stand-alone  product  next  month, 
after  Veritas  completes  its  acqui¬ 
sition  of  Precise  Software. 

■  Service  Manager,  an  IT  re¬ 
source-tracking  and  user  charge- 
back  technology  that’s  in  beta¬ 
testing  now  and  is  scheduled  to 
ship  by  year’s  end. 


anybody  be  surprised  by  the 
[survey]  results?”  Parkinson 
asked.  “This  has  been  a  prob¬ 
lem  for  the  25  years  I’ve  been 
in  the  profession.” 

One  of  the  challenges  is  that 
applications  built  to  support 
business  operations  are  often 
rigid  and  can  be  “antithetical  to 
agile  behavior,”  Parkinson  said. 
“Businesses  like  to  be  able  to 
change  directions  on  a  dime.” 

Parkinson  said  IT  depart¬ 
ments  should  have  some  of 
their  workers  “live”  with  busi¬ 
ness  units  to  get  a  better  un¬ 
derstanding  of  their  require¬ 
ments.  In  addition,  IT  man¬ 
agers  have  to  be  straightfor¬ 
ward  with  business  leaders 
“on  what’s  reasonable  to  ex¬ 
pect  from  IT  projects  and 
what’s  unreasonable  to  ex¬ 
pect,”  he  said.  I 

Ire  mis  issue 

CIOs  take  steps  to  repair  IT s  tarnished 
image.  Page  37 


by  Service  Manager,  an  inter¬ 
nally  developed  tool  for  track¬ 
ing  the  use  of  IT  resources. 

Dong  Jin  Kim,  a  senior 
SAN  architect  at  Eastman 
Kodak  Co.  in  Rochester,  N.Y., 
said  he’s  trying  to  move  away 
from  using  massive  Excel 
spreadsheets  to  document 
Kodak’s  IT  infrastructure. 

Kim  is  involved  in  managing 
more  than  200  Sun  Solaris 
servers,  160-plus  Oracle  data¬ 
bases  and  disk  arrays  from 
multiple  vendors. 

“It’s  becoming  a  nightmare 
to  track  it  all,”  Kim  said.  He 
added  that  he  now  plans  to 
evaluate  Veritas’  automated 
discovery  and  provisioning 
software,  along  with  similar 
products  from  EMC  Corp., 
IBM  and  Scotts  Valley,  Calif.- 
based  InterSAN  Inc. 

Guetzloff  said  one  thing  he 
likes  about  Veritas’  technology 
is  that  it  appears  to  be  more 
“vendor-agnostic”  than  rival 
utility  computing  tools  being 
offered  by  server  and  disk 
array  makers.  I 


SWITCH  PUNS 

Veritas  also  said  it  will  port  some  of  its  soft¬ 
ware  to  Cisco  and  Brocade  storage  switches: 

QuickLink  38329 
www.computerwoiid.com 


Veritas  Readies  Tools  to 
Support  Utility  Computing 
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The  facts  tell  a  compelling  story.  Microsoft  SQL  Server™  2000  is  the  new  worldwide  leader  in  scale-up 
server  performance,  achieving  the  top  two  rankings  in  the  latest  TPC-C  benchmark  tests.  To  learn  how  SQL  Server 
2000  can  quickly  increase  your  scalability,  visit  microsoft.com/sql/tpc  Software  for  the  Agile  Business. 
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Blogs  Play  a  Role  in 
Homeland  Secfjgty 


Make  it  easy  for  critical-infrastructure 
agencies  to  share  info  from  bottom  up 


The  Blogging 

«  a 


BY  DAN  VERTON 

eblogs,  the  In¬ 
ternet  technol¬ 
ogy  that  allows 
anyone  with  a 
browser  to  publish  a  personal¬ 
ized  online  journal,  are  in¬ 
creasingly  being  used  to  sup¬ 
port  the  intelligence-sharing 
requirements  of  homeland  se¬ 
curity  efforts. 

Providence,  R.I.-based  Trac¬ 
tion  Software  Inc.  today  will 
announce  that  the  Western 
States  Information  Network 
(WSIN)  has  deployed  Trac¬ 
tion’s  TeamPage  enterprise 
weblog  software  to  support 
law-enforcement  task  forces 
that  are  working  on  terrorism 
and  drug  investigations. 

Karen  Aumond,  assistant  di¬ 
rector  of  the  WSIN,  said  a  new 


project  called  the  Advanced 
Terrorism  Information  Ex¬ 
change,  which  is  being  expand¬ 
ed  to  local  water  departments, 
fire  departments  and  other 
critical-infrastructure  organi¬ 
zations,  will  be  one  of  the  first 
initiatives  to  benefit  directly 
from  enterprise  weblogs. 

“What  typically  happens  is 
that  there  is  a  flurry  of  e-mails, 
and  everybody  is  copied  on 
the  e-mail,”  Aumond  said. 

“And  they  are  automatically 
purged  after  60  days  if  you 
don’t  archive  them.  By  doing 
this  [posting  e-mails  to  a 
weblog],  we  can  forward  these 
e-mails  to  a  central  place,  and 
then  we  can  access  them  from 
the  road.  And  what’s  even  bet¬ 
ter,  we  can  search  them.” 

Criminal-intelligence  ana- 


The  Blogging 
Revolution 

ENTERPRISE  WEBLOGS: 

■  Take  advantage  of  common 
Web  infrastructure  at  very 
low  cost. 


■  Can  improve  knowledge¬ 
sharing  from  the  bottom 
(lower-level  personnel)  up. 

■  Can  be  outfitted  with  access 
controls,  communities  of  inter¬ 
est,  archive  and  search  features, 
and  e-mail  alerts. 


lysts  are  using  TeamPage  to 
create  access-controlled  web¬ 
logs,  or  blogs,  as  repositories 
for  research  data  collected  for 
further  analysis.  The  WSIN 
watch  center  in  Sacramento, 
Calif.,  uses  them  to  share  user 
tips,  training  schedules  and  ar¬ 
ticles  that  are  of  interest  to 


law-enforcement 
task  forces. 

The  enterprise 
weblog  “has  all  the 
hallmarks  of  a  disrup¬ 
tive  technology,”  said 
Greg  Lloyd,  Traction’s  co¬ 
founder  and  president.  “Unlike 
ERP  hell  or  groupware  hell, 
where  it  may  take  six  months 
just  to  deploy  infrastructure, 
weblogs  that  use  the  standard 
Web  infrastructure  can  be  de¬ 
ployed  in  15  minutes.” 

Many  Benefits 

Peter  Brockmann,  vice  presi¬ 
dent  of  marketing  at  Irving, 
Texas-based  bTrade  Inc.,  is  us¬ 
ing  a  weblog  as  a  marketing 
tool  for  the  company’s  busi- 
ness-to-business  software. 

Low  cost  is  only  one  advan¬ 
tage  that  blogs  have  over  more 
traditional  and  complex  col¬ 
laboration  products,  he  said. 
“The  other  tools  allow  you  to 
do  more,  but  what’s  nice  about 
a  blog  is  it’s  real  easy.  It’s  high¬ 
ly  tuned  to  allow  for  rapid 
publishing,”  he  said. 

Blogging  is  “no-brainer  Web 
technology,”  Brockmann  added. 
By  deploying  it,  “you  save  your¬ 
self  a  lot  of  headaches,  heart¬ 


burn  and  pain.” 

Weblogs  can  also 
benefit  corporate  cul¬ 
tures,  analysts  said. 
“Knowledge  manage¬ 
ment  systems  are  of¬ 
ten  so  formal  and  top-down- 
driven  that  the  normal  worker 
sees  no  benefit  in  using  them 
or  contributing,”  said  James 
Gaskin,  an  IT  consultant  in 
Dallas.  “Blogs,  like  e-mail,  flat¬ 
ten  the  hierarchy  and  let 
everyone  contribute  without 
having  to  stare  down  a  suit  at 
a  meeting  or  contradict  a  man¬ 
ager  in  person.” 

Sundar  Kadayam,  chief 
technology  officer  at  Intel- 
liseek  Inc.,  a  Cincinnati  firm 
that  develops  Web-based  intel¬ 
ligent-agent  and  knowledge- 
discovery  technologies,  said 
blogging  applications  can  add 
to  the  problem  of  information 
overload  if  they  don’t  incorpo¬ 
rate  personalized  searching 
and  alert  mechanisms  —  capa¬ 
bilities  that  Intelliseek  is  de¬ 
veloping.  “When  those  types 
of  capabilities  are  layered  on 
top  of  blogging  tools,  you’re 
going  to  see  the  mainstream 
adoption  of  weblogs  in  the  en¬ 
terprise  setting,”  he  said.  I 


MORE  INFO 

Read  our  QuickStudy 
about  weblogs  at 

©  QuickLink  37757 
computenivorld.com 


IM  Security  Problems  Persist 


BY  JAIKUMAR  VIJAYAN 

Security  problems  relating  to 
the  unfettered  use  of  con¬ 
sumer  chat  software  on  corpo¬ 
rate  networks  are  fueling 
adoption  of  tougher  security 
measures  and  more  commer¬ 
cial-grade  products,  users  and 
analysts  said. 

Ongoing  concerns  about  in¬ 
stant  messaging  (IM)  security 
were  heightened  last  week  by 
the  disclosure  of  six  vulnera¬ 
bilities  in  America  Online 
Inc.’s  Mirabilis  ICQJM  client 
software.  Two  of  them  are  par¬ 
ticularly  dangerous  and  could 
allow  hackers  to  gain  full  ad¬ 
ministrative  control  of  a  vic¬ 
tim’s  computer,  according  to 
Ejovi  Nuwere,  a  security  engi¬ 
neer  at  Core  Security  Tech¬ 
nologies  Inc.,  the  Boston  soft¬ 
ware  company  that  discovered 
the  flaws. 

A  spokesman  for  AOL’s  ICQ. 


subsidiary  acknowledged  the 
flaws  in  the  latest  version  of 
ICQs  freely  downloadable 
chat  software.  But  he  claimed 
that  only  one  of  the  flaws,  in¬ 
volving  a  feature  that  lets 
users  open  Internet  e-mails,  is 
dangerous.  A  fix  is  in  the 
works,  he  added. 

Sensitive  Data  at  Risk 

Security  analysts  have  been 
warning  for  some  time  that 
unchecked  use  of  such  soft¬ 
ware  could  cause  dangerous 
holes  in  firewalls,  leading  to 
sensitive  corporate  data  being 
exposed  on  public  networks 
and  files  being  transferred  in 
an  unprotected  fashion. 

Such  concerns  are  pushing 
companies  to  look  for  new 
ways  of  securing  IM  commu¬ 
nications,  said  Michael  Oster- 
man,  president  of  Osterman 
Research  Inc.  in  Black  Dia¬ 


mond,  Wash.  The  firm’s  twice- 
yearly  surveys  have  shown 
adoption  of  commercial  IM 
products  to  be  growing  faster 
than  consumer  IM  products 
on  corporate  networks. 

At  the  same  time,  public  IM 
products  still  dominate  corpo¬ 
rate  networks.  AOL’s  Instant 
Messenger,  for  instance,  is 
used  at  64%  of  the  companies 
surveyed,  Osterman  said. 

“The  good  news  is  that  it  is 
easy  to  detect  the  use  of  [con¬ 
sumer]  services  and  to  either 
shut  them  down  or  to  give 
users  an  alternative  that  is  a 
sanctioned  enterprise  prod¬ 
uct,”  said  Dana  Gardner,  an 
analyst  at  The  Yankee  Group 
in  Boston. 

Arlington  County,  Va.,  is 
rolling  out  Microsoft’s  Real- 
Time  Communications  server 
software,  which  will  tie  into 
the  county’s  Exchange  2003 


and  Active  Directory  environ¬ 
ments.  It  will  form  the  basis  of 
a  collaborative  infrastructure, 
where  users  will  be  able  to 
carry  on  secure  IM  and  white¬ 
board  sessions,  as  well  as 


Corporate  IM 
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share  applications  and  files  in 
real  time,  said  Vivek  Kundra, 
the  county’s  director  of  IT. 

The  use  of  consumer  IM 
software  is  a  serious  security 
concern,  said  Scott  Loach,  se¬ 
nior  information  security  engi¬ 
neer  at  Raymond  James  Finan¬ 
cial  Inc.,  a  financial  services 
firm  in  St.  Petersburg,  Fla. 

“We  have  seen  some  vulner¬ 
abilities  [in  consumer  IM  soft¬ 
ware]  that  have  been  exploit¬ 
ed,”  Loach  said.  The  need  to 
comply  with  regulatory  re¬ 
quirements  has  led  to  a  much 
closer  scrutiny  of  IM  use  on 
corporate  networks,  he  added. 

The  company  plans  to  ban 
the  use  of  consumer  IM  soft¬ 
ware  on  its  networks,  Loach 
said.  New  application-level  se¬ 
curity  software  from  Check 
Point  Software  Technologies 
Ltd.  in  Redwood  City,  Calif., 
will  make  it  possible  to  shut 
down  consumer  chat  clients 
by  simply  checking  a  box  in 
the  software’s  administrative 
interface,  he  explained.  I 
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Now  you  can  know 
who  made  the  change 
in  addition  to  what, 
when,  where,  and 
how  data  change 
has  occurred. 


Tripwire®  assures  the  integrity  of  your  data 
and  gives  you  the  ability  to  immediately  detect 
and  pinpoint  undesired  change  across  all  your 
servers  and  network  devices.  By  establishing 
a  baseline  of  data  in  its  known  good  state, 
Tripwire  software  monitors  and  reports  any 
changes  to  that  baseline  and  enables  rapid 
discovery  and  recovery  when  an  undesired 
change  occurs.  Thus  ensuring  the  stability  of 
your  information  services 

Maximize  System  Uptime 

■  Identify  change  quickly 

■  Enable  quick  restoration  to  a  desired  state 

■  Eliminate  risk  and  uncertainty 

Increase  IT  Staff  Productivity 

■  Lower  costs  and  frustration 

■  Greatly  reduces  the  time  it  takes  to 
find  and  diagnose  problems 

Failsafe  Foundation  for  Data  Security 

■  Ensure  the  integrity  of  your  data 

■  Enable  detailed  audit  reporting 

■  Maintain  granular  visibility  and  control 


Tripwire’s  Integrity  Assurance  solutions  are 
the  only  way  to  have  100%  confidence  that 
your  systems  remain  uncompromised.  In  the 
event  of  a  change  in  state,  you  will  know  who 
made  the  change  and  exactly  what,  when, 
where,  and  how  change  has  occurred  so 
you  can  recover  quickly. 

For  a  FREE  30-day  fully-functional  demo 
and  copy  of  the  white  paper  “Integrity 
Assurance  in  a  Layered  Security  Strategy...”, 
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Air  Force  Unit  Tracks  Deliveries 
Of  Parts  With  Wireless  System 


IT  director  says  new  technology  could 
help  logistics  center  save  $15M  per  year 


BY  BOB  BREWIN 

PALM  DESERT.  CALIF. 

The  air  force  Ma¬ 
teriel  Command’s  lo¬ 
gistics  center  at  Hill 
Air  Force  Base  in 
Ogden,  Utah,  has  deployed  a 
wireless  parts-tracking  system 
that’s  expected  to  save  about 
$15  million  annually 
by  cutting  the  average 
length  of  time  that 
parts  remain  in  the 
repair  pipeline  from 
24  hours  to  just  two. 

Mike  Neri,  the 
base’s  IT  director,  last 
week  said  at  Computerworld’ s 
Mobile  &  Wireless  World  con¬ 
ference  here  that  Hill  AFB 
needs  to  track  a  massive  num¬ 
ber  of  parts.  The  base  moves 
86,000  items  in  and  out  of  33 
warehouses  each  month,  in¬ 
cluding  everything  from  elec¬ 
tronic  “black  boxes”  to  land¬ 
ing  gear  assemblies  used  on  a 
variety  of  fighter  aircraft. 

Although  the  status  of  parts 
can  be  monitored  by  a  wired 
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inventory  system  at  the  base, 
until  the  recent  wireless  roll¬ 
out,  Hill  AFB  had  no  way  to 
track  the  vehicles  and  drivers 
that  transport  hardware  from 
one  warehouse  to  another.  In 
addition,  some  of  the  ware¬ 
houses  and  repair  facilities  are 
located  miles  apart  from  one 
another,  according  to 
Neri. 

Now  the  base  has 
deployed  a  wireless 
Automated  Manifest 
Tracking  System 
(AMTS)  that  auto¬ 
matically  transmits 
pickup  and  delivery  informa¬ 
tion  to  drivers  equipped  with 
cellular  phones  from  Reston, 
Va.-based  Nextel  Communica¬ 
tions  Inc.  or  mobile  computers 
made  by  Tokyo-based  Toshiba 
Corp.  The  system  works  over 
a  cellular  network  operated  by 
Overland  Park,  Kan.-based 
Sprint  PCS  Group,  Neri  said. 

Both  the  Nextel  phones  and 
the  Toshiba  computers  have 
built-in  Global  Positioning 


System  receivers  that  auto¬ 
matically  transmit  the  loca¬ 
tions  of  the  30  trucks  used  to 
move  parts  to  dispatch  cen¬ 
ters,  Neri  said.  The  mobile  de¬ 
vices  are  also  equipped  with 
bar  code  scanners,  which  let 
drivers  transmit  information 
to  the  base’s  back-end  systems 
about  the  parts  they  pick  up. 

Because  IT  security  is  a 


prime  concern  for  the  Air 
Force,  Neri  said,  the  AMTS 
uses  encryption  technologies 
that  support  the  Triple  Digital 
Encryption  Standard.  Cover¬ 
age  is  a  concern  for  some 
users  of  wireless  networks, 
but  Neri  said  that  isn’t  an  issue 
at  Hill  because  both  Nextel 
and  Sprint  rely  on  cellular 
towers  located  on  the  base. 


The  increased  visibility  into 
the  location  of  repair  items  — 
as  well  as  the  ability  to  track 
and  dispatch  drivers  —  has  al¬ 
lowed  Hill  to  dramatically  re¬ 
duce  the  time  it  takes  to  move 
parts  through  the  repair 
process,  Neri  said. 

It  took  Hill  AFB  two  years 
to  develop  AMTS  using  IBM’s 
WebSphere  Everyplace  Access 
software.  Now  that  the  wire¬ 
less  system  is  running  in  pro¬ 
duction  mode,  Neri  said,  he 
expects  that  it  will  also  be  in¬ 
stalled  at  Air  Force  Materiel 
Command  centers  in  Georgia 
and  Oklahoma.  I 
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IBM,  Palm  Combine  on  Mobile  Starter  Bundle 


IBM  last  week  launched  a 
starter  version  of  its  WebSphere 
Everyplace  Access  software 
that’s  packaged  with  25  of  Palm 
Inc.’s  tungsten  handheld  de¬ 
vices,  a  move  designed  to  let 
companies  test-drive  IBM’s  mo¬ 
bile  middleware  technology. 

Rodney  Adkins,  general  man¬ 
ager  of  IBM’s  pervasive  comput¬ 
ing  division,  said  that  the  Mobile 
Office  Entry  Jumpstart  Solution 
will  provide  companies  with  the 
technology  needed  to  pilot  and 
test  mobile  applications,  such  as 
sales  force  automation  systems. 

Adkins  said  the  Jumpstart 


package  will  also  let  companies 
“start  small  with  mobile  applica¬ 
tions  and  then  grow  overtime” 
and  evaluate  returns  on  invest¬ 
ment  throughout  the  process. 

Although  IBM  has  bundled 
Palm  hardware  with  the  Web¬ 
Sphere  tools  as  part  of  Jump¬ 
start,  the  middleware  supports  a 
range  of  mobile  devices,  includ¬ 
ing  Pocket  PCs,  smart  phones 
based  on  operating  systems 
from  Microsoft  Corp.  and 
phones  that  use  London-based 
Symbian  Ltd.’s  software. 

The  Jumpstart  kit  will  sell  for 
about  $80,000,  which  includes 


the  cost  of  the  Palm  hardware, 
Adkins  said. 

Jack  Gold,  an  analyst  at  Meta 
Group  Inc.  in  Stamford,  Conn., 
said  that  for  Palm,  the  Jumpstart 
package  represents  an  opportu¬ 
nity  to  boost  the  penetration  of 
its  handheld  devices  into  the 
corporate  market. 

Until  now,  most  of  the  hand¬ 
helds  sold  by  Palm  have  been 
bought  by  individual  users,  Gold 
said.  “Palm  has  just  not  done  a 
very  good  job  of  putting  to¬ 
gether  enterprise  solutions," 
he  added. 

-BobBrewin 


Continued  from  page  1 

WLAN  Security 

the  property’s  network  had 
only  six  authorized  WLAN 
APs  in  operation.  Dillon  said 
he  fired  up  network  sniffer 
software  to  check  the  actual 
number  of  APs  —  and  quickly 
detected  a  total  of  15. 

That  example  clearly  illus¬ 
trates  the  continued  prolifera¬ 
tion  of  rogue  APs,  he  noted. 
Dillon  said  IT  managers  need 
to  Fight  back  by  setting  and 
enforcing  strict  policies 
against  unauthorized  WLAN 
devices.  He  also  recommend¬ 
ed  that  companies  institute 
tough  end-user  authentication 
systems  to  ensure  that  only  le¬ 
gitimate  users  can  gain  access 
to  wireless  networks  set  up  to 


transmit  sensitive  business  in¬ 
formation. 

In  addition,  Dillon  said 
companies  need  to  set  rules 
governing  the  use  of  WLAN 
client  devices,  which  can  be 
operated  on  home  or  public- 
access  WLAN  systems  that 
lack  stringent  security  con¬ 
trols.  For  example,  Hilton  now 
requires  that  WLAN  cards  in 
laptop  PCs  be  disabled  when 
the  systems  are  connected  to 
the  company’s  wired  LANs  to 
prevent  viruses  or  Trojan 
horses  from  being  injected 
into  the  networks. 

In  a  similar  vein,  IT  staffers 
at  Sears,  Roebuck  and  Co. 
have  added  software  to  the 
10,000  WLAN-equipped  note¬ 
book  PCs  distributed  to  the 
retailer’s  field  service  techni¬ 
cians  that  blocks  them  from 


using  public-access  hot  spots, 
said  Dave  Sankey,  director  of 
process  and  technology  devel¬ 
opment  at  Sears.  He  added 
that  Sears  plans  to  install  pri¬ 
vate  WLAN  hot  spots  at  stores 
and  other  company  facilities 
so  technicians  can  access 
training  materials. 

Growing  Concern 

The  need  to  better  secure 
WLANs  is  expected  to  remain 
a  paramount  concern  for  IT 
managers  as  the  use  of  high¬ 
speed,  over-the-air  networks 
continues  to  expand.  Gartner 
Inc.  in  Stamford,  Conn.,  esti¬ 
mates  that  shipments  of 
WLAN  chip  sets  used  in  both 
APs  and  client  devices  totaled 
18  million  units  last  year  and 
predicts  that  the  figure  will  hit 
50  million  by  2006. 


Joe  Przeporia,  an  IT  manag¬ 
er  at  agricultural  products 
conglomerate  Cargill  Inc.  in 
Wayzata,  Minn.,  said  the  com¬ 
pany’s  numerous  business 
units  use  such  a  wide  variety 
of  WLAN  and  fixed  wireless 
technologies  “that  we  are  not 
[yet]  equipped  to  deal  with  it 
at  a  corporate  level.”  But,  he 
added,  Cargill  has  started  to 
develop  high-level  policies  to 
address  WLAN  security  is¬ 
sues,  including  rogue  APs. 

Hewlett-Packard  Co.  has 
scrambled  to  come  up  with 
policies  governing  the  use  of 
its  wireless  networks  by  visi¬ 
tors  to  its  facilities,  said 
Richard  Stone,  mobility  solu¬ 
tions  manager  at  the  vendor’s 
HP  Americas  division.  The 
rules  now  subject  guest  users 
to  the  same  Internet  filtering 


procedures  that  are  applied  to 
HP  employees,  Stone  said. 

Allan  Thompson,  CEO  of 
Senforce  Technologies  Inc. 
in  Cupertino,  Calif.,  said  his 
company  has  developed  loca¬ 
tion-aware  security  software 
that  automatically  configures 
settings  on  PCs  and  mobile 
devices  to  prevent  hackers  or 
network  sniffers  from  gaining 
unauthorized  access  to  data 
when  the  systems  are  connect¬ 
ed  to  public-access  WLAN  hot 
spots.  > 

MORE  ONUNE 

A  Commerce  Department  IT  manager 
details  a  series  of  wireless  trends: 

QuickLink  38275 

GM's  CTO  Tony  Scott  talks  about  the 
development  of  wireless-dependent  cars: 

O  QuickLink  38303 
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CRM  Apps  Take  Flight  at  Aircraft  Makers 


BY  MARC  L.  SONGINI 

Facing  gloomy  market  condi¬ 
tions,  large  airplane  makers 
like  Raytheon  Aircraft  Co.  and 


The  Boeing  Co.  are  rolling  out 
CRM  applications  in  a  bid  to 
boost  sales  and  improve  their 
customer  service  capabilities. 


Raytheon  Aircraft  in  No¬ 
vember  went  live  with  call 
center,  sales  and  service  appli¬ 
cations  developed  by  Siebel 


Systems  Inc.,  said  Ed  Dolanski, 
vice  president  of  customer 
support  at  the  Wichita,  Kan.- 
based  maker  of  business  jets 
and  personal  planes.  About 
170  Raytheon  employees  are 
using  the  CRM  system. 


The  only  thing  as  reliable  as  our 
servers  is  our  satisfaction  guarantee. 

We  make  it  our  business  to  keep  your  business  working. 


Gateway  Server  Satisfaction  Guarantee1 

If  you  are  not  completely  satisfied  with  your  Gateway 
server,  you  can  return  it  within  90  days  of  purchase. 

No  questions  asked.  Ask  a  Gateway  Sales  Representative 
for  complete  details. 


New  Gateway  Rack-Optimized  Servers 

Make  the  most  of  your  limited  space  and  budget  with 
Gateway's  high-performance,  rack-optimized  servers.They 
easily  fit  into  any  environment,  instantly  adding  capacity 
and  performance  for  your  mission-critical  applications. 


HMlilKIM 


51699 

Gateway  955  Server 

Big  Performance  for  Smalt  Spaces. 


Prices  si  ifbng  at 


52199  1 —  -  ‘ 

Gateway®  975  Server 

High  Density  and  High  Performance. 


•  Intel*0  Xeon'‘  Processor  1 ,80GHz  with  5 1 2K  L2  Cache 
(upgradeable  to  Dual  3.06GHz  processors  with  533MHz  FSB) 

•  256M8  PC2100  ECC  DDR  SDRAM  (expandable  to  6GB) 

•  36GB  Ultra  320  SCSI  hot-swap  lOKrpm  Hard  Drive' (upgradable 
to  three  1 46GB  Hard  Drives) 

-  Integrated  Dual-Channel  Ultra  320  SCSI  with  Embedded  RAID  0/1 3 

•  Integrated  Intel7-’  Dual  10/100/1000  Ethernet 

•  Gateway  Server  Manager  software 

•  3 -Yr  Parts,  labor,  3-Yr  On-Site — Next  Business  Day  Limited  Warranty, 
HWTech  Support  as  long  as  you  own  it* 

.  •  ECC  Class  A  Emission  Standard3 


■  Intel®  Xeon”*  Processor  2.40GHz  with  533MHz  FSB  and  512  L2  Cache 
(upgradeable  to  Dual  3.06GHz  processors) 

•  5 1 2MB  PC21 00  ECC  DDR  SDRAM  (expandable  to  6GB) 

•  36GB  Ultra  320  SCSI  hot-swap  lOKrpm  Hard  Drive'  (upgradeable 
to  seven  146GB  Hard  Drives) 

•  Integrated  Dual-channel  Ultra  320  SCSI  with  Embedded  RAID  0/1  ’ 

•  Integrated  Intel®  Dual  10/100/1000  Ethernet 

•  Gateway  Server  Manager  software 
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Prior  to  the  Siebel  rollout, 
there  was  no  formal  CRM  sys¬ 
tem  in  place  at  Raytheon  Air¬ 
craft,  a  subsidiary  of  Lexing¬ 
ton,  Mass.-based  Raytheon  Co. 
“We  identified  that  we  didn’t 
have  any  type  of  customer 
memory,  and  we  cleaned  up 
our  act,”  Dolanski  said. 

He  wouldn’t  disclose  the 
project’s  cost  but  said  Ray¬ 
theon  Aircraft  has  already  re¬ 
covered  $1.4  million  of  its  in¬ 
vestment  through  increased 
sales.  The  Siebel  applications 
were  installed  for  13%  less  than 
originally  budgeted  and  were 
in  use  four  weeks  ahead  of 
schedule,  Dolanski  added.  Now 
the  company  plans  to  extend 
the  software  to  its  airport  ser¬ 
vice  centers  so  workers  there 
can  access  relevant  informa¬ 
tion  about  aircraft  owners. 

Saving  Time  and  Money 

Chicago-based  Boeing’s  com¬ 
mercial  aviation  services  unit 
is  preparing  to  retire  a  mix  of 
homegrown  Unix  and  main¬ 
frame  CRM  applications  in  fa¬ 
vor  of  Siebel’s  call  center  soft¬ 
ware,  said  Gabe  Hanzeli,  infor¬ 
mation  systems  director  for 
technical  services  and  modifi¬ 
cations  at  the  Boeing  division. 

Hanzeli  said  the  new  system 
will  cost  several  million  dol¬ 
lars  and  is  due  for  a  test  roll¬ 
out  in  the  first  half  of  next 
year.  The  Siebel  software  will 
let  Boeing’s  aircraft  support 
staff  access  customer  data 
from  a  single  screen,  he  said. 

Hopefully,  that  will  reduce 
the  time  it  takes  to  answer 
questions  from  customers, 
Hanzeli  noted.  Boeing  also  ex¬ 
pects  the  Siebel  rollout  to  re¬ 
duce  its  internal  application 
maintenance  costs. 

CRM  is  just  starting  to  gain 
momentum  in  the  aviation  in¬ 
dustry,  said  Sheldon  Tkatch,  a 
senior  project  manager  at  Gar¬ 
rett  Aviation  Service  Centers, 
a  Tempe,  Ariz.-based  provider 
of  plane  maintenance  and 
modification  services.  In  Janu¬ 
ary  2002,  Garrett  began  using 
hosted  sales  and  service  appli¬ 
cations  from  Salesforce.com 
Inc.  The  software  has  helped 
Garrett  become  more  proac¬ 
tive  in  tracking  sales  opportu¬ 
nities  and  contacting  cus¬ 
tomers,  Tkatch  said.  I 
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about  U.S.  citizens  will  be 
gathered  and  stored  as  part  of 
the  two  IT  projects.  Loy  and 
Tether  testified  at  a  House 
subcommittee  hearing  on 
whether  data  mining  pro¬ 
grams  could  help  improve 
national  security. 

The  proposals  have  also 
come  under  fire  from  members 
of  Congress  who  have  ques¬ 
tioned  how  the  data  mining 
technology  will  be  used  and 
what  kind  of  databases  will  be 
created.  Rep.  William  Clay  (D- 
Mo.)  said  at  the  hearing  that 
the  projects  have  “a  dark  cloud 
of  secrecy”  hanging  over  them. 

Targeting  Terrorists 

The  TSA’s  Computer  Assisted 
Passenger  Prescreening  Sys¬ 
tem  II  (CAPPS  II)  will  analyze 
the  name,  address,  phone 
number  and  birth  date  of  air¬ 
line  passengers,  in  an  effort  to 
detect  terrorists.  Loy  declined 
to  comment  on  how  the  TSA 
will  decide  whether  a  passen¬ 
ger  should  be  let  on  a  plane  or 
questioned  further. 

But  CAPPS  II  should  reduce 
the  number  of  false  positive 
identifications  that  the  govern¬ 
ment’s  existing  airline-passen¬ 
ger  profiling  system  produces, 
Loy  said.  He  called  the  current 
technology  flawed  because  it 
lacks  sophisticated  methods  of 
predicting  passenger  behavior. 

Loy  said  the  TSA  expects 
to  roll  out  CAPPS  II  by  mid- 
2004.  The  agency  has  no  plans 
to  save  information  about 
travelers  who  aren’t  flagged  as 
possible  terrorists,  he  added. 

Tether  said  DARPA’s  Total 
Information  Awareness  (TLA) 
research  project  is  designed  to 
provide  the  FBI  and  other  fed¬ 
eral  agencies  with  tools  that 
can  be  used  to  mine  data.  But 
DARPA  doesn’t  plan  to  collect 
any  data  itself,  he  said. 

When  asked  how  DARPA 
will  ensure  that  personal  in¬ 
formation  caught  in  TIA’s  net 
is  correct,  Tether  said  that’s  up 
to  potential  users  like  the  FBI. 

“We’re  not  the  people  who 
collect  the  data,”  he  said. 
“We’re  the  people  who  supply 
the  analytical  tools  to  the  peo¬ 
ple  who  collect  the  data.”  I 


Gross  is  a  reporter  for  the 
IDG  News  Service. 


U.S.  Agencies  Defend  Data  Mining  Plans 


BY  GRANT  GROSS 

WASHINGTON 

Government  officials  in  charge 
of  two  data  mining  projects 


that  have  been  criticized  by 
privacy  advocates  told  Con¬ 
gress  last  week  that  the  infor¬ 
mation  to  be  collected  will  be 


much  more  limited  in  scope 
than  opponents  have  feared. 

James  Loy,  director  of  the 
U.S.  Transportation  Security 


Administration  (TSA),  and 
Anthony  Tether,  director  of 
the  Defense  Advanced  Re¬ 
search  Projects  Agency 
(DARPA),  both  tried  to  as¬ 
suage  concerns  that  large 
amounts  of  personal  data 
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Got  Outsourcing 
Questions? 

Computerworld’s  New  IT  Executive  Summit  Series  Has  the  Answers 


If  you’re  an  IT  executive  in  an 
end-user  organization,  apply  to 
attend  Computerworld’s  upcoming 
complimentary  half-day  summit  on 
IT  Outsourcing:  The  Offshore 
Alternative. 

Robust  global  communication 
technologies  and  state-of-the-art 
security  tools  have  made  IT  out¬ 
sourcing  an  increasingly  viable 
option  to  achieve  ROI.  Part  of 
Computerworld’s  new  IT  Executive 
Summit  Series,  this  invitation-only, 
4-hour  summit  will  explore  how 
companies  are  realizing  tangible 
benefits  from  outsourcing  IT 
application  development, 
integration  and  management. 

Seating  is  limited,  so  apply 
today! 


Chicago,  Illinois 

Thursday,  May  15,  2003,  8:00am  to  Noon 
Palmer  House  Hilton,  “Parlor  H” 


8:00am  to  8:45am 
8:45am  to  9:00am 


9:00am  to  9:45am 


9:45am  to  10:15am 


Registration  and  Networking  Breakfast 

Welcome  and  Opening  Keynote 
Outsourcing  Watch  2003: 

The  Best  of  Both  Shores 

Maryfran  Johnson,  Editor  in  Chief, 
Computerworld 

Industry  Update 

Evaluating  Your  IT  Sourcing  Options 

Bart  Perkins,  Managing  Partner, 

Leverage  Partners 

Business  Case  Study 

James  Beattie,  EVP  and  CTO, 

CCC  Information  Services 


10:15am  to  10:30am  Refreshment  Break 


10:30am  to  11:30am  Outsourcing  Strategies 

Leadership  Strategies  in  Offshore 
Outsourcing 

Moderator:  Maryfran  Johnson, 

Editor  in  Chief,  Computerworld 
Panelists: 

■  Jerry  McElhatton,  Senior  EVP 

of  Global  Technology  and  Operations, 
MasterCard  International 

■  Joe  Drouin,  VP  and  CIO,  TRW  Automotive 

■  Tasos  Tsolakis,  VP  of  Global  Technology 
Operations,  Global  Exchange  Services 

■  James  Beattie,  EVP  and  CTO, 

CCC  Information  Services 


Bart  Perkins 


11:30am  to  Noon  Open  Forum 


For  information,  call  Chris  Leger  at  508-820-8277 
or  to  register  online,  visit 
www.itexecutivesummit.com/outsourcing 
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PATRICIA  KEEFE 


Kicking  up  the  debate  on  the  future 
of  IT  another  notch  is  Nicholas  G.  Carr’s 
sure-to-be-controversial  contention  in 
this  month’s  Harvard  Business  Review 
that  the  pervasiveness  of  IT  will  soon 
make  it  strategically  irrelevant.  Summing  up  his  po¬ 
sition  is  the  article’s  headline:  “IT  Doesn’t  Matter.” 

Bam!  Now  there’s  a 


stance  sure  to  stir  up 
some  conversation 
around  the  data  banks. 

(To  read  an  interview 
with  Carr,  turn  to  page 
44.) 

On  the  one  hand,  the 
very  pervasiveness  of  IT, 
coupled  with  two  other 
trends  —  the  increasing¬ 
ly  technically  literate 
population,  and  the  ris¬ 
ing  integration  of  com¬ 
puter  technology  into  everything 
from  cars  to  clothes  dryers  to  cloth¬ 
ing  —  severely  diminishes  the  mys¬ 
tique  that  has  always  surrounded  IT. 

The  idea  is  that  IT  has  become  as 
ordinary,  albeit  as  key,  as  the  less 
glamorous  accounting  or  manufac¬ 
turing  departments.  You  can’t  run  a 
company  without  them,  but  they’re 
nothing  to  get  excited  about.  Every¬ 
one  has  these  departments,  and  they 
pretty  much  do  the  same  things. 

Carr  reasons,  then,  that  these  de¬ 
partments  have  lost  whatever  com¬ 
petitive  or  strategic  edge  they  might 
have  once  provided. 

And  there  is  some  truth  to  that. 

For  example,  right  now,  we’re  all  us¬ 
ing  cell  phones,  desktop  PCs  and 
laptops,  and  a  goodly  portion  of  us 
are  using  wireless  devices.  Yes,  there 
will  he  another  wave  of  technology. 
There  always  is.  It’s  like  a  force  of 
nature  that  you  can’t  hold  back.  Carr 
is  right  again  when  he  says  everyone 
will  eventually  line  up  to  use  that 
next  advance  in  technology,  creating 
a  level  playing  Field.  For  him,  it’s 
enough  that  IT  filters,  adapts  and 
manages  these  evolutions. 

But  technology  has  the  potential 


to  succeed  in  permeating 
almost  every  aspect  of 
our  lives  and  the  prod¬ 
ucts  we  use.  Some  might 
say  that  creating  all  that 
new  stuff  won’t  be  IT’s 
job.  The  R&D,  manufac¬ 
turing  and  design  groups 
will  be  responsible  for 
weaving  technology  ad¬ 
vances  into  consumer 
goods.  The  question, 
then,  for  IT  folks  is:  What 
role  will  we  play? 

IT  has  more  to  offer  than  mere  su¬ 
pervision.  It  could  become  a  combi¬ 
nation  of  tech  adviser  and  testing  lab 
for  many  of  these  products.  Or  it 
could  morph  away  from  building 
pure  technology  systems  that  run  a 
business  and  toward  building  tech¬ 
nology  into  the  services  and  prod¬ 
ucts  the  business  sells.  You  can’t  get 
more  aligned  with  business  goals 
than  that! 


General  Motors  is  off  to  a  good 
start  here.  Corporate  CIO  Ralph 
Syzgenda  years  ago  teamed  each  of 
his  group  CIOs  with  specific  depart¬ 
ment  heads.  He  wanted  his  CIOs  to 
understand  the  business  they  were 
serving  and  to  be  on  the  front  lines, 
ready  and  able  to  partner  on  creat¬ 
ing  solutions  to  business  problems. 

And  that  is  just  one  model.  Unlike 
Carr,  I  don’t  think  IT  has  to  dissolve 
into  an  entity  that  is  strictly  focused 
on  maintenance,  risk  avoidance  and 
cost-cutting.  Astute  CIOs  are  al¬ 
ready  practicing  this  in  some  form 
or  another. 

Yet  if  you  spend  too  much  time 
nursemaiding  the  past  or  practicing 
risk  mitigation  in  the  present,  then 
the  future  —  and  opportunity  along 
with  it  —  will  be  here  and  gone  be¬ 
fore  you  know  it.  We  still  need  IT 
leaders  who  can  think  conceptually, 
who  can  dream  of  ways  to  further 
business  goals  via  technological  ad¬ 
vances.  No  matter  what  your  pre¬ 
sent  circumstances,  you  need  to 
keep  an  eye  on  the  future. 

Carr  advocates  taking  a  more  de¬ 
fensive  posture  toward  IT  invest¬ 
ments.  But  sometimes  the  best  de¬ 
fense  is  a  good  offense.  What’s 
needed  now  is  to  go  back  to  the 
chalkboard  and  figure  out  the  best 
strategy.  I 
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PIMM  FOX 

IT  Warning: 
No  Badge, 
No  Access 

IMAGINE  THIS  SCENARIO: 
You  leave  your  computer 
unattended  while  you’re  in 
a  meeting,  and  someone  uses 
it  to  send  e-mail  with  sexual  innuen¬ 
dos  to  a  co-worker.  Next  thing  you 
know,  an  HR  representative  is  asking 
you  to  do  some  explaining. 

Or  what  about  shared  computers  in 
hospitals,  call  centers  or  financial  ser¬ 
vices  firms  with  open  floor  plans? 
Chances  are,  users  are  expected  to  log 
off  the  network  every  time  they  walk 
away  from  the  terminal.  That’s  sup¬ 
posed  to  thwart  unauthorized  access 
to  personal  or  sensitive  information. 
But  that  rarely  happens. 

Instead,  users  de¬ 
pend  on  you  to  baby¬ 
sit  their  security 
needs.  They  want 
you  to  build  and  in¬ 
stall  systems  to  guard 
against  their  own 
lapses,  which,  as  you 
know,  are  the  biggest 
threat  to  fundamen¬ 
tal  security  policies 
and  procedures.  Peo¬ 
ple  just  don’t  make 
the  effort,  and  until 
something  awful  happens,  you  can’t 
even  get  them  to  rid  their  monitors  of 
yellow  sticky  notes  with  scribbled 
passwords.  That’s  why  IT  security  has 
to  include  physical  systems  woven  in¬ 
to  the  daily  routine  of  each  employee. 

A  new  and  potentially  ubiquitous 
option  involves  RF-based  smart  cards 
linked  to  fingerprint  readers  that 
connect  via  the  USB  port.  The  smart 
card  allows  for  a  security  net  of  your 
choosing  —  from  1  to  10  meters.  If 
you  travel  outside  of  that  range,  the 
computer  locks  up.  Come  back  within 
range,  and  the  screen  reverts  to  the 
last  image.  This  wireless  system  relies 
on  a  unique  personal  identifier  en¬ 
crypted  into  an  RF  badge. 

Coupled  with  the  fingerprint  reader 
—  another  IT  security  watchdog  — 
this  device  enables  you  to  determine 
who  has  used  any  computer  at  any 
given  time.  In  addition,  if  more  than 
one  person  has  access  to  a  particular 
PC,  the  screen  will  revert  to  the  im- 
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age  appropriate  for  each  user. 

Manufactured  by  a  small  St.  Louis- 
based  company,  Access  Denied  Sys¬ 
tems  Inc.,  these  systems  are  being 
used  at  Washington  University,  also  in 
St.  Louis.  They  are  one  type  of  what  I 
predict  will  be  myriad  vendor  offer¬ 
ings  that  link  physical  security  and  ac¬ 
cess  to  IT  systems. 

It’s  a  good  way  to  take  aim  at  un¬ 
authorized  access  from  within  an  en¬ 
terprise.  That  type  of  system  could  be 
especially  important  in  health  care 
and  financial  services  companies, 
where  new  government  regulations 
are  designed  to  protect  patient  and 
customer  confidentiality. 

There’s  no  panacea  for  security 
threats.  Firewalls,  software  protection 
and  password  management  schemes 
are  for  naught  if  you’ve  already  got  a 
Trojan  horse  who  parks  in  the  com¬ 
pany  lot.  I 


MICHAEL 

GARTENBERG 

Wi-Fi: 
Why  and 
Why  Not 

WITHOUT  A  DOUBT, 
one  of  the  few 
growth  areas  of  the 
industry  today  is  wireless 

network  technology  built  around  the 
802.11x  standard.  According  to  my 
company,  Jupiter  Research,  corporate 
deployment  of  802.11  devices  (includ¬ 
ing  adapter  cards  and  access  points) 
will  reach  99  million  by  2008,  up  from 
14  million  in  2003  —  representing  a 
compound  annual  growth  rate  of  48%. 

The  primary  key  to  this  growth  will 
be  standards  compliance.  The  expect¬ 
ed  ratification  of  802.11g  and  802.11i 
this  year  will  provide  the  backward 
compatibility  and  security  that  enter¬ 
prises  seek,  while  combined  industry 
efforts  led  by  Intel  (with  its  Centrino 
chip),  Cisco  Systems  and  the  Wi-Fi  Al¬ 
liance  will  help  interoperability  be¬ 
tween  vendor  products  and  simulta¬ 
neously  raise  corporate  awareness. 

There  are  a  number  of  benefits  to 
deploying  corporate  wireless  LANs, 
which  should  put  them  on  most  IT  de¬ 
partments’  to-do  lists  in  2003.  But  you 
need  to  know  a  few  caveats. 

There  are  cost  savings  associated 
with  using  a  WLAN  instead  of  tradi¬ 
tional  wired  technology,  but  saving 
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money  isn’t  going  to  be  the 
biggest  driver.  Rather,  the 
additional  productivity 
gains  associated  with  wire¬ 
less  are  what  make  WLANs 
useful  and,  combined  with 
the  cost  savings,  create  a 
powerful  argument  to  get  a 
WLAN  project  approved. 

Before  you  run  out  and 
start  cutting  purchase  or¬ 
ders  for  Wi-Fi  access 
points,  remember  that  one 
size  WLAN  does  not  fit  all 
organizations.  Organiza¬ 
tions  of  different  sizes  will 
have  different  issues  to  re¬ 
solve.  Large  companies  will  have 
greater  concerns  about  security  and 
will  be  focused  on  the  confusion  over 
evolving  security  standards  that  hin¬ 
der  adoption  in  that  market.  Smaller 
businesses  should  first  focus  on  justi¬ 
fying  initial  start-up  costs  and  look  for 
ways  to  lower  those  as  much  as  possi¬ 
ble.  These  problems  are  critical  for  IT 
departments  to  address  prior  to  imple¬ 
mentation  but  can  be  easily  resolved 
with  some  upfront  planning. 
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For  smaller  companies, 
one  way  to  drive  down 
costs  is  to  use  existing 
standards-based  products, 
such  as  those  with  802.11b 
technology.  That  approach 
is  technically  viable  and 
ensures  compatibility  with 
future  investments.  As 
costs  for  802.11b  equip¬ 
ment  fall  further,  these 
purchases  will  be  much 
easier  to  justify. 

Big  companies  should 
also  support  existing  stan¬ 
dards,  such  as  802.11b,  but 
in  addition  they  need  a 
road  map  toward  802.11g  and  802.11i 
compliance  in  the  products  they  buy 
via  software  and/or  firmware  up¬ 
grades.  They  should  be  prepared  to  of¬ 
fer  multimode  and  802.11g  products 
once  these  standards  are  fully  ratified. 
While  large  companies  are  least  likely 
to  be  concerned  about  backward  com¬ 
patibility,  they  would  be  best  served 
by  taking  a  risk-averse  approach  and 
waiting  for  ratified  802.11g  technology 
rather  than  risking  short-term  deploy¬ 


ments  of  equipment  that  may  become 
expensive  to  upgrade  or  may  not  in¬ 
teroperate  with  new  gear. 

Finally,  improved  security  must  be¬ 
come  an  important  factor  in  selecting 
WLAN  products.  This  remains  the  big¬ 
gest  barrier  to  wide-scale  deployment. 

The  power  of  WLANs  is  readily  ap¬ 
parent.  The  productivity  of  knowledge 
workers  greatly  increases  when  mo¬ 
bile  technology  —  lightweight  laptops. 
Tablet  PCs  and  powerful  handheld  de¬ 
vices  —  are  enhanced  with  high-speed 
WLAN  connections.  Because  more 
users  are  dependent  on  network  con¬ 
nections  in  order  to  be  productive, 
WLANs  can  help  extend  this  reach 
and  therefore  justify  their  costs  in 
terms  of  ROI  gained.  The  key  is  to  bal¬ 
ance  the  gains  and  focus  on  the  issues 
that  are  appropriate  to  your  business, 
then  deploy  and  watch  the  accolades 
come  into  your  in-box  —  wirelessly,  of 
course.  I 
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Thoughts  on  Giving  CFOs  Project  info 


CIOs  NEED  to  be  careful  about 
what  they  reveal  to  the  CFOs 
who  want  information  for  quarterly 
earnings  reports  that  comply  with 
the  Sarbanes-Oxley  Act  [“CFOs 
Push  IT  Managers  for  More  Info 
About  Projects,”  QuickLink  37988], 
Strategic  projects  and  investments 
in  IT  make  the  future  of  the  compa¬ 
ny.  If  this  information  is  made  pub¬ 
lic,  close  scrutiny  by  competitors 
can  reveal  a  lot  about  company 
direction. 

Nauman  Sheikh 
Functional  architect, 
Metavante  Corp.,  Milwaukee 

CFOs  AND  THEIR  C-level  peers, 
including  CIOs,  should  have 
been  doing  this  a  long  time  ago.  If 
they  haven’t,  they  deserve  the 
problems  that  have  arisen.  I  moved 
from  being  the  manager  of  a  $300 
million  chemical  plant  to  managing 
IT  projects  10  years  ago  precisely 
because  of  the  issue  raised  by  this 
article.  I  have  delivered  value  be¬ 
cause  I  didn’t  let  the  geeks  BS  the 
organization  about  why  they  didn’t 
have  to  follow  the  laws  of  ROI. 

Fred  Fickling 

Dallas,  gungh@yahoo.com 


The  installation  of  system 
development  methodologies 
would  solve  all  the  problems  de¬ 
scribed  in  the  article,  but  CIOs 
would  have  to  sacrifice  some  of 
their  “smoke-and-mirrors"  power. 
International  experience  with 
methodologies  has  proved  their 
worth.  Sadly,  being  on  time  and  un¬ 
der  budget  isn’t  as  important  to  IT 
departments  as  retaining  power. 
Andrew  H.  Olson 
Managing  director, 

Team  International  Group, 
Gainesville,  Fla., 
teamolson@bigplanet.com 

Don’t  Export  Jobs 

MACHIAVELLlsaidnotto  use 
mercenaries:  If  they’re  lousy, 
they'll  lose  your  kingdom  for  you, 
and  if  they’re  good,  they'll  take  it 
away  from  you.  My  corollary:  The 
same  thing  goes  for  outsourced  IT 
workers  [“Exporting  IT  Jobs,” 
QuickLink  38007]. 

Stewart  Dean 

Unix  Systems  administrator, 
Bard  College, 

Annandale-on-Hudson,  N.Y., 
sdean@bard.edu 


Maybe  we  should  outsource 
U.S.  executive  managers, 
with  their  excessive  pay  and  perks, 
instead  of  IT  workers.  After  all, 
managers  consume  most  of  the 
overhead.  Any  decent,  educated 
person  with  common  sense  can 
perform  their  job  functions. 

It  won't  be  the  Chinese,  the  Viet¬ 
namese,  the  Russians  or  all  of  the 
terrorists  combined  who  destroy 
this  country:  it  will  be  American 
business. 

Greg  Maschak 
Cleveland 

NOW  I  REALIZE  why  they  call  it 
“Blue  Monday."  Sheesh,  could 
you  run  these  depressing  stories  on 
Thursdays? 

Michael  Jones 
Programmer/analyst, 
Savannah,  Ga., 
enojones@email.uophx.edu 

A  World  View 

CAN  HIRE  in  places  like  India, 
Pakistan,  Russia  and  the  Philip¬ 
pines  managers  and  security  ex¬ 
perts  with  better  qualifications  than 
you’ll  be  likely  to  find  in  any  compa¬ 
ny  in  the  U.S. 

In  fact,  I  suggest  that  most  of  our 
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legislators,  CIOs  and  government 
contractors  should  be  drawn  from 
the  ranks  of  the  hungry  and  hard¬ 
working,  college-educated  person¬ 
nel  available  in  those  places. 

Sending  work  offshore  is  the 
economic  equivalent  of  people  vot¬ 
ing  with  their  feet.  Hopefully,  the 
inevitable  equilibration  of  wage  lev¬ 
els  across  all  nations  whose  bor¬ 
ders  aren’t  closed  to  commerce  will 
eventually  result  in  everybody  in  the 
world  being  better  off,  and  not  in 
the  U.S.  becoming  a  Third  World 
country,  with  barefoot,  starving 
people. 

David  M.  Eaves 

CEO,  Internet  Security  Corp., 
Sunnyvale,  Calif. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
P0  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OMore  letters  on  these  and  other 
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Dave  Passmore  is  the  Virginia-based  Research  Director  for  the 
Burton  Group.  Named  one  of  Network  World  Magazine’s 
“50  Most  Powerful  People  in  the  Networking  Industry,” 
Passmore  is  Burton  Group’s  “thought  leader”  in  the 
area  of  network  architecture. 
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Research  Director,  Burton  Group 


Mobility — Access  Anywhere,  Anytime 


>  The  term  “mobility”  is  being  used  in  many  different 
contexts.  How  do  you  define  it? 

Increasingly,  the  meaning  of  mobility  is  becoming  aligned  with 
the  concept  of  “untethered  communications”  —  it  assumes 
portable  devices  that  will  support  some  type  of  wireless  voice 
or  wireless  data  networking  functionality.  Mobility  implies  the 
use  of  wireless  LANs,  cellular  phone  systems  or  various  wire¬ 
less  wide-area  or  metro  networking  services.  Ultimately, 
mobility  will  permit  a  device  such  as  a  laptop  computer  or 
personal  digital  assistant  (PDA)  to  seamlessly  roam  between 
these  various  wireless  communications  systems  without  the 
user  having  to  reconnect  or  login  again.  In  this  context,  wire¬ 
less  geographical  coverage  will  be  ubiquitous. 

>  Public  Wi-Fi  (802.11)  wireless  networks  are 
emerging  as  an  attractive  alternative  to  cellular 
networks.  What  are  the  benefits  driving  this 
growth?  What  are  potential  barriers  to  Wi-Fi’s 
successful  deployment  as  a  public  carrier  service? 

The  emerging  industry  view  is  that  public  Wi-Fi  networks  will 
be  complementary  rather  than  competitive  to  cellular  net¬ 
works.  In  fact,  many  of  the  public  Wi-Fi  hotspots  are  allied 
with  or  operated  by  cellular  carriers  in  an  attempt  to  provide 
comprehensive  local  and  wide-area  wireless  coverage  along 
with  a  single  monthly  bill  for  customers. Wireless  LAN 
(WLAN)  hotspots  are  becoming  extremely  popular  due  to 
their  ease  of  use  and  the  abundant  Internet  access  bandwidth 
provided  —  more  than  1 0  times  what’s  provided  by  the  latest 
cellular  data  network  offerings. 

>  Convergence  of  voice  and  data  communications  is 
accelerating  on  traditional  wireline  networks.  Do 
you  see  convergence  on  wireless  networks  also 
gaining  wide  acceptance?  How  soon? 

Voice/data  convergence  is  already  happening  in  the  wide  area, 
as  next-generation  2.5G  and  3G  data  networking  services  are 
being  added  to  cellular  voice  networks.  But  many  businesses 
are  expected  to  implement  their  own  converged  wireless  net¬ 
works  that  support  Wi-Fi  phones.  Some  issues  must  be 
addressed  to  ensure  traditional  “total  quality”  voice,  but  these 
challenges  should  be  worked  out  with  products  that  imple¬ 


ment  the  new  802. 1  I  e  WLAN  quality  of  service  standard 
within  the  next  two  to  three  years. 

>  Enterprise-wide  deployments  of  WLANs  can 
become  very  complex  to  implement  and  manage. 
Do  you  see  a  strong  market  opportunity  for  man¬ 
aged  services  of  WLANs? 

Some  organizations  will  choose  to  outsource  the  management 
of  their  WLANs  in  the  same  way  that  they  outsource  man¬ 
aged  services  for  their  wired  LAN  and  WAN  infrastructures. 
However,  one  of  the  hottest  new  technology  developments 
may  address  much  of  the  WLAN  complexity  issue.  About  a 
dozen  vendors  (startups  and  established  vendors)  have  intro¬ 
duced  “WLAN  switches”  that  re-architect  a  site’s  WLAN 
environment  into  a  single  integrated  system  and  simplify  the 
administration,  security  and  deployment  of  complex  WLAN 
environments.  Of  course,  the  installation  and  life-cycle  man¬ 
agement  of  these  next-generation  WLAN  systems  also  repre¬ 
sents  an  opportunity  for  managed  services  providers  and 
systems  integrators  to  provide  their  expertise  in  this  sector. 

>  The  adoption  of  wireless-enabled  devices  (both 
laptops  and  PDAs)  is  creating  a  management 
nightmare  for  IT  to  support.  Do  you  see  the 
management  of  mobile  devices  as  another  strong 
market  opportunity  for  managed  services? 

The  management  of  laptops  and  PDAs  is  certainly  much  more 
complex  than  it  used  to  be;  operation  often  requires  “locking 
down”  these  devices  so  that  they  can’t  pick  up  stray  viruses, 
and  to  ensure  that  appropriate  security  measures  are  used.  An 
important  issue  is  establishing  comprehensive  security  policies 
for  wireless-enabled  devices  —  particularly  when  employees 
want  to  purchase  and  use  their  own  low-cost  PDAs  or  laptops 
on  corporate  networks.  Many  organizations  are  turning  to 
managed  services  providers  for  help  in  this  area. 

For  more  information,  please  call  800-874-8647  x385 
or  visit  www.unisys.com/networkservices 
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managing  its  servers 
would  never  be  simple 
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enced  an  explosion  of  servers  and  applications 


management  to  a  standardized  platform,  and 


changing  needs 


Done: 


servers  comes  with  true  self-managing,  self- 
healing  systems  to  harness  the  massive  power 
of  up  to  32  Intel0  ’  Xeon™  processors.  It  can 
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REAL-TIME  BUSINESS  ISN’T 

JUST  ABOUT  GETTING 
INFORMATION  FASTER. 
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IT’S  ABOUT  MAKING  SURE 
YOUR  BUSINESS  CAN 

TAKE  ADVANTAGE  OF  IT. 

In  a  true  real-time  business,  everything  moves 
faster.  Your  data  is  always  where  and  when  it's 
needed.  You  coordinate  activities  and  automate 
processes  end  to  end.  You  enjoy  greater  visibility 
and  understanding.  And  you  have  the  ability  to 
drive  your  business  with  new  immediacy. 

TIBCO  Software's  proven  integration  solutions 
enable  real-time  business.  By  unifying  and 
optimizing  your  existing  assets — people, 
processes  and  legacy  systems — you  can  do 
more  with  what  you  already  have.  And  do  it 
better.  It's  what  we  call  The  Power  of  Now."* 
Our  unbiased,  independent  approach  and 
easily-deployed  integration  solutions  can 
help  you  grow  your  business  even  in  today's 
difficult  environment. 


As  the  world's  leading  independent  integration  software  provider, 
TIBCO  has  helped  more  than  2,000  companies  take  advantage  of 
real-time  business.  Discover  how  you  can  put  The  Power  of  Now  to 
work.  Call  888-558-4226  or  visit  us  at  www.tibco.com/cwc 


The  Power  of  Now™ 


REAL-TIME  IN  ACTION:  DELTA  AIRLINES 


i  Delta  Air  Lines  partnered  with  TIBCO  to  create  the 
:  Delta  Nervous  System,  which  connects  Delta’s  13  busi¬ 

ness  units  and  30  databases,  and  handles  more  than  5 
j  million  daily  business  events. 

“The  ability  to  share  information  with  our  employees 
and  customers  in  real-time,  and  to  automate  how  we 
share  it,  has  allowed  us  to  transform  our  business, 
i  improve  customer  service,  and  reduce  costs.” 

i  — Curtis  Robb,  Deha  Air  Lines  CIO, 

Delta  Technology  CEO 


Wading  Into  IP  Telephony 

A  hybrid  IP/PBX  approach 
allows  some  companies  to 
realize  the  benefits  of  IP 
telephony  without  taking 
an  expensive  plunge. 

Page  28 


QUICKSTUDY 

Fighting  Spam 

Software  that  controls  the  flow  of  un¬ 
wanted  commercial  e-mail  uses  a  variety 
of  techniques,  including  blacklisting, 
“whitelisting”  and  Bayesian  analysis,  to 
keep  up  with  the  spammers.  Page  33 
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FUTURE  WATCH 

Computers  That  Cajole 

Persuasive  technologies,  which  are 
striving  to  use  computers  to  change 
attitudes  and  behaviors,  will  require  a 
new  sensitivity  on  the  part  of  developers 
and  IT  managers.  Page  32 
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Data  center  automation  software 
promises  to  help  companies  cut 
administrative  costs  and  improve 
efficiencies.  By  Jaikumar  Vijayan 


AS  A  COMPANY  that  hosts 

supply  chain  operations  for 
customers  such  as  Verizon 
Wireless  and  the  U.S.  Postal 
Service,  New  Breed  Inc. 
has  a  crucial  need  for  infra¬ 
structure  availability  and  reliability. 

As  part  of  its  efforts  on  those  fronts, 
the  company  is  using  software  from 
Opsware  Inc.  in  Sunnyvale,  Calif.,  to 
automate  several  day-to-day  opera¬ 
tional  tasks  across  its  data  centers. 

Manual  administrative  duties  such 
as  making  configuration  changes,  up¬ 
grading  applications  and  rolling  out 
patches  have  been  automated  using  the 
software.  And  Opsware  has 
also  allowed  High  Point, 

N.C.-based  New  Breed  to 
boost  its  disaster  recovery 
capabilities  through  the 
software’s  ability  to  store  and  use  data 
center  configuration  data  to  rebuild 
downed  systems. 

The  net  result:  better  change  man¬ 
agement  processes,  speedier  problem 
resolution  and  lower  administration 
costs,  says  New  Breed  CIO  Ashfaque 
Chowdhury. 

“We  have  about  400  servers  with 
nearly  5TB  of  data  and  almost  100  peo¬ 
ple  in  our  data  center,”  Chowdhury 
says.  The  hope  is  that  Opsware’s  tech¬ 
nology  will  “enable  high  levels  of  relia¬ 
bility  and  reduce  cycle  time  in  deliver¬ 
ing  change  at  a  lower  cost,”  he  adds. 

New  Breed  isn’t  alone.  As  IT  organi¬ 
zations  come  under  increasing  pres¬ 
sure  to  cut  costs,  expect  to  see  a  grow¬ 
ing  number  of  them  move  to  automate 
data  center  operations,  says  Corey  Fer- 
engul,  an  analyst  at  Stamford,  Conn.- 
based  Meta  Group  Inc.  Many  compa¬ 
nies  have  already  tapped  other  cost¬ 
cutting  opportunities  —  through  mea¬ 
sures  such  as  staff  cuts  and  reduced 
work  hours  —  and  are  now  looking  to 
data  center  automation  as  a  new  way 
to  rein  in  costs,  Ferengul  says. 

“This  whole  automation  trend  is  a 
pretty  fundamental  one,”  says  Chowd¬ 
hury.  “You  can’t  be  competitive  in  cost 
and  pricing  unless  you  are  able  to  op¬ 
erate  with  a  lower  cost  structure.” 


But  to  take  advantage  of  such  tech¬ 
nologies,  companies  will  first  need  to 
put  in  place  good  processes  that  easily 
lend  themselves  to  automation,  Feren¬ 
gul  says.  Products  that  are  currently 
available  are  largely  immature  and 
untested  in  enterprise  environments, 
with  most  vendors  having  fewer  than 
10  customers,  he  notes. 

“It  is  also  still  not  established  what 
the  core  criteria  is  that  users  are  look¬ 
ing  for,”  he  says.  As  a  result,  “every 
vendor  has  their  own  take  and  is  at¬ 
tacking  the  market  in  their  own  way.” 

Broadly  speaking,  data  center  auto¬ 
mation  tools  aim  to  enable  intelligent 
and  automatic  deployment 
and  provisioning  of  hard¬ 
ware,  software,  applications 
and  services.  The  knowl¬ 
edge  behind  repetitive, 
time-consuming  systems  administra¬ 
tion  tasks  —  such  as  upgrading,  chang¬ 
ing,  managing  and  configuring  equip¬ 
ment  —  is  encapsulated  into  and  exe¬ 
cuted  by  automation  software,  based  on 
user-defined  preferences  and  policies. 

For  example,  using  such  tools,  a 
company  could  centrally  distribute  and 
manage  new  applications,  security 
patches,  user  profiles  and  passwords 
across  data  center  systems.  Or  those 
tools  could  be  used  to  provision  addi¬ 
tional  hardware  or  storage  resources  to 
applications  on  the  fly. 

The  savings  come  from  the  reduced 
dependence  on  systems  administrators 
and  the  shorter  time  it  takes  to  imple¬ 
ment  changes,  say's  Nick  Van  der 
Zweep,  a  director  at  Hewlett  Packard 
Co.’s  Enterprise  Systems  Group. 

A  Range  of  Options 

Data  center  automation  tools  vary 
widely  in  capabilities  and  functions. 

HP’s  Utility  Data  Center  and  Sun 
Microsystems  Inc.’s  N1  technologies, 
for  instance,  allow  users  to  do  on- 
demand  provisioning  of  consolidated 
hardware,  storage  and  network  equip¬ 
ment.  The  technologies  work  by  aggre¬ 
gating,  virtualizing  and  sharing  such 
resources  across  multiple  data  center 
applications. 
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CHOOSING  A  VENDOR 


For  a  market  that’s  still  evolving!  there  are 
a  lot  of  vendors  offering  data  center  au¬ 
tomation  tools,  users  and  analysts  say. 

And  whiie  many  of  the  products  seem  sim¬ 
ilar  on  the  surface,  their  capabilities  vary. 

So  prior  to  choosing  one,  it's  vital  to 
know  precisely  what  your  requirements 
are,  find  out  which  vendor  meets  your 
specific  needs  and  ensure  that  the  tech¬ 
nology  really  works  as  billed,  says  Ash- 
faque  Chowdhury,  CIO  at  New  Breed. 

For  instance,  some  tools  allow  users 
to  automate  application  and  hardware  pro¬ 
visioning  and  to  track,  audit  and  remediate 
configurations.  Others  use  infrastructure 
performance  information  to  determine  and 
fulfill  application  needs.  And  still  others  are 
focused  on  pooling,  virtualizing  and  shar¬ 
ing  data  center  hardware,  storage  and  net¬ 
work  resources. 

“The  product  categories  from  a  pur¬ 
chaser’s  point  of  view  are  too  differentiat¬ 
ed”  to  directly  compare,  Chowdhury  says. 


“You  have  to  decide  based  on  your  needs.” 

“The  most  difficult  part  was  just  select¬ 
ing  the  right  application,”  says  Tom  King, 
chief  information  security  officer  at  Leh¬ 
man  Brothers,  which  is  using  automation 
software  from  Thor  Technologies  to  provi¬ 
sion  user  access  to  enterprise  applications. 

For  Lehman,  the  most  important  factor 
was  the  ability  of  the  automation  soft¬ 
ware  to  manage  not  just  packaged  appli¬ 
cations  but  customized  applications  as 
well.  King  says. 

“There  are  hundreds  of  applications 
that  are  homegrown  or  proprietary  that  we 
needed  [the  software]  to  interface  with,” 
King  says. 

Vendor  stability  should  also  be  consid¬ 
ered  when  making  a  purchasing  decision, 
says  Corey  Ferengul,  an  anaiyst  at  Meta 
Group.  Most  of  the  companies  in  this  mar¬ 
ket  are  start-ups  with  fewer  than  10  custo¬ 
mers,  he  says. 

- JaikumarVijayan 


Another  example  of  automation  soft¬ 
ware  is  Opsware  System  3.5,  which  fo¬ 
cuses  more  on  the  automation  of  soft¬ 
ware  processes. 

Opsware’s  technology,  for  instance, 
aims  to  enable  automated  deployment 
of  operating  systems,  applications  and 
databases  across  multiple  servers.  In 
addition,  it  allows  users  to  centrally 
identify  and  patch  servers  that  need  to 
be  secured  and  to  deploy  or  roll  back 
code,  content  and  configurations  of 
multiple  servers,  says  Tim  Howe,  chief 
technology  officer  at  Opsware. 

Provisioning  Strategy 

Users  can  define  and  encapsulate  spe¬ 
cific  policies  relating  to  their  applica¬ 
tion  environments  —  like  optimal  con¬ 
figuration  and  security 
settings  —  which  Op¬ 
sware  uses  when  deploy¬ 
ing  applications  and  ser¬ 
vices,  Howe  says. 

The  software  works  by 
collecting  a  wide  range  of 
infrastructure  informa¬ 
tion  from  agent  software 
that’s  installed  in  data 
center  hardware.  A  cen¬ 
tralized  policy  engine 
uses  that  information 
when  deploying  software 
or  making  changes  that 
impact  the  infrastructure. 

Opsware  3.5  also  holds  a 
complete  blueprint  of  the  software  in¬ 
frastructure  in  a  data  center  that  al¬ 
lows  companies  to  recover  quickly 
from  disasters. 

Tira  Wireless  Inc.  in  Toronto  is  us¬ 
ing  software  from  Think  Dynamics 
Inc.,  also  in  Toronto,  to  automate  the 
manner  in  which  its  hardware  allocates 
resources  to  applications. 

The  company  is  using  the  Think- 
Control  software  suite  to  tie  its  exist¬ 
ing  Wintel  servers  to  a  bank  of  standby 
machines  with  idle  capacity.  Think- 
Control  uses  information  gathered 
from  third-party  network  management 
products  such  as  HP  OpenView  and 


Computer  Associates  International 
Inc.’s  Unicenter  to  monitor  CPU  uti¬ 
lization  rates  on  the  Wintel  servers. 
When  CPU  utilization  on  any  box  ex¬ 
ceeds  a  certain  threshold,  the  software 
automatically  kicks  in  and  brings  in 
fresh  resources  from  the  standby  pool, 
says  Chris  Prendergast,  Tira’s  director 
of  operations. 

When  CPU  utilization  drops  below 
the  predefined  threshold,  ThinkCon- 
trol  automatically  releases  the  excess 
capacity  back  to  the  common  pool. 

The  approach  has  eliminated  the 
need  to  continually  add  and  configure 
hardware  to  handle  workload  spikes, 
Prendergast  says.  Many  of  the  capaci¬ 
ty  planning  and  performance  monitor¬ 
ing  tasks  that  used  to  be  done  manual¬ 
ly  are  now  done  by 
ThinkControl. 

“We  were  having  a  dif¬ 
ficult  time  modeling  the 
hardware  requirement  to 
support  users  as  adop¬ 
tion  [of  Tira’s  services] 
ramped  up,”  Prendergast 
says.  Without  Think  Dy¬ 
namics’  software,  the  op¬ 
tion  would  have  been  to 
buy  large,  grossly  under¬ 
utilized  dedicated  sys¬ 
tems  for  each  application 
to  handle  unexpected 
spikes. 

The  temporary  provi¬ 
sioning  offered  by  Think  Dynamics  “is 
proving  to  be  a  better  option,”  Pren¬ 
dergast  says. 

Identifying  Targets 

Some  tools  aim  to  help  users  automate 
key  data  center  administration  tasks. 

Investment  firm  Lehman  Brothers 
Holdings  Inc.,  for  instance,  is  using 
software  from  New  York-based  Thor 
Technologies  Inc.  to  automate  the  ad¬ 
ministration  of  user  application  access 
rights,  according  to  Tom  King,  chief 
information  security  officer  at  Lehman 
Brothers. 

The  software  automatically  controls 


user  access  to  applications  based  on 
policy  and  keeps  up  with  changes  to 
business  rules  or  employee  status, 
without  requiring  the  administrator  to 
reset  or  change  anything,  according  to 
Nancy  Colwell,  a  director  at  Thor. 

“Just  like  any  other  firm  our  size,  it 
is  quite  a  challenge  to  efficiently  and 
consistently  apply  all  of  the  different 
rules  around  user  provisioning  to  get 
people  into  and  out  of  systems  quickly 
[and  reliably],”  King  says.  Lehman 
Brothers  plans  to  expand  use  to  all 
12,500  of  its  employees. 

“We  have  taken  all  of  the  manual  fin¬ 
gers  on  keyboard  user  account  crea¬ 
tions  and  automated  them,”  resulting 
in  lower  costs  and  better  efficiencies. 
King  says. 

But  the  key  to  such  benefits  lies  in 
careful  planning,  Ferengul  says.  Care 
needs  to  be  taken  and  lots  of  testing 


needs  to  be  done  before  companies  en¬ 
trust  key  administrative  tasks  to  auto¬ 
mation  software,  says  Prendergast. 

“There  is  an  aspect  of  testing  and 
validation  this  thing  needs  to  go 
through  before  it  can  be  deployed,” 
Chowdhury  says.  “There  can  be  a  huge 
impact  on  productivity  if  this  thing 
goes  haywire.” 

This  is  especially  important  because 
the  software  is  still  highly  immature, 
he  adds. 

It’s  also  crucial  that  the  software  can 
be  customized  to  fit  an  organization’s 
specific  needs,  King  says.  Otherwise 
users  can  get  locked  into  proprietary 
interfaces,  he  says. 

And  not  all  processes  can  be  easily 
automated,  Ferengul  says.  Though  a  lot 
of  administrative  tasks  can  be  codified 
into  such  software,  there  are  special¬ 
ized  tasks  that  cannot,  i 


HWe  have 
taken  all  of 
the  manual  fingers 
on  keyboard  user 
account  creations 
and  automated 
them,  [resulting 
in  lower  costs  and 
better  efficiencies]. 


TOM  KING,  CHIEF  INFORMA¬ 
TION  SECURITY  OFFICER, 
LEHMAN  BROTHERS  HOLDINGS 


MAJOR  PLAYERS  AND  PRODUCTS 


Opsware  Inc. 

Sunnyvale,  Calif. 

MAIN  PRODUCT:  Opsware  System  3.6 

WHAT  IT  DOES:  Enables  IT  organizations 
to  automatically  provision,  deploy,  change 
and  operate  multiple  application  and  oper¬ 
ating  system  software  stacks  across  multi¬ 
ple  hardware  platforms  and  data  centers. 


BladeLogic  Inc. 

Bedford,  Mass. 

MAIN  PRODUCT:  BladeLogic  Configuration 
Manager 

WHAT  IT  DOES:  Automates  server  and  appli¬ 
cation  provisioning  on  Solaris,  HP-UX.  AIX, 
Linux,  NT  and  Windows  2000  systems.  Also 
automates  system  configuration  changes. 


*  Jareva  Technologies  Inc. 

*  Sunnyvale,  Calif. 

•  (Acquired  by  Veritas  Software  Corp.) 

j  MAIN  PRODUCT:  OpForce  IT  Automation  Suite 

:  WHAT  IT  DOES:  Automates  discovery  and 
'  l  recording  of  hardware  and  software  inventory, 

:  tracking  software  licenses,  provisioning 

•  servers,  setting  up  administrator  and  user 
:  access  and  provisioning  servers. 


Think  Dynamics  Inc. 

Toronto 

MAIN  PRODUCT:  ThinkControl  Suite 

WHAT  IT  DOES:  Provides  policy-based 
management  of  computing  resources  and 
service-level  objectives  through  automation 
of  infrastructure  provisioning,  capacity  man¬ 
agement  and  service-level  management. 
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David  stever,  man¬ 
ager  of  communica¬ 
tion  technology  ser¬ 
vices  at  PPL,  knows 
that  IP  telephony  is 
the  future.  He  also 
knows  that  his  com¬ 
pany  (formerly  known  as  Pennsylvania 
Power  &  Light)  has  a  massive  invest¬ 
ment  in  a  traditional  voice  network. 
With  3,000  lines  and  a  wiring  infra¬ 
structure  at  its  Allentown  headquar¬ 
ters  that  Stever  describes  as  “challeng¬ 
ing,”  the  utility  selected  an  IP-enabled 
private  branch  exchange  (PBX)  tele¬ 
phone  system  from  Nortel  Networks 
Ltd.  when  it  decided  to  upgrade  its 
network.  “We  needed  to  get  our  feet 
wet  [with  IP  telephony],  but  we  need¬ 
ed  a  proven,  mature  system,”  he  says. 

On  the  other  hand,  in  2001,  when  the 
Cancer  Therapy  &  Research  Center 
consolidated  facilities  and  expanded 
its  headquarters  in  San  Antonio,  the 
organization  was  working  from  a  clean 
sheet  of  paper  —  and  opted  for  a  pure 
IP  setup  from  Cisco  Systems  Inc.  Chief 
Technology  Officer  Mike  Luter  says 
the  network’s  speed  and  manageability, 


along  with  the  “increased  mobility” 
enjoyed  by  physician  end  users,  made 
pure-play  the  way  to  go. 

These  experiences  neatly  summarize 
the  telephony  choices  IT  organizations 
are  making  today.  Legacy  PBXs  are 
rapidly  being  supplanted  by  IP-enabled 
“hybrids,”  which  analysts  say  offer 
most  of  the  advantages  of  pure  IP  sys¬ 
tems  (such  as  the  ability  to  easily 
change  extensions  and  to  use  a  new 
generation  of  applications  for  activities 
like  inventory  management)  while  al¬ 
lowing  companies  to  retain  most  of 
their  existing  infrastructures.  But  pure- 
play  IP  systems,  unlike  hybrids,  let  IT 
organizations  manage  one  network 
structure  rather  than  two  and  are  use¬ 
ful  in  small  regional  offices  where  it 
wouldn’t  make  sense  to  install  a  PBX. 

Bottom  line:  Pure-play  IP  telephony 
is  gaining  traction  primarily  (but  not 
exclusively)  with  organizations  that 
are  undergoing  other  major  changes  — 
a  headquarters  move  or  consolidation, 
for  example,  or  any  major  construction 
project  that  entails  new  cabling. 

Hybrid  PBX  systems  —  traditional 
PBXs  that  use  special  port  cards  to 


Growth  of  IP  Telephony 

Synergy  Research  Group  predicts  that 
sales  of  enterprise  IP  telephony  equipment 
will  grow  from  $1.35  billion  this  year  to 
$5.43  billion  in  2007.  a  compound 
annual  growth  rate  of  41.7% 


In  2001, 24%  of  the  approximately 
6  million  telephone  lines  sold  in  the 

U.S.  were  IP;  in  2002,  the  number  had 
grown  35%  of  5  million  lines  sold 

according  to  in-Stat/MDR.  1P/PBX  [hy¬ 
brids]  are  taking  the  place  of  regular  PBX 
systems."  says  Brian  Strachman,  an  ana¬ 
lyst  at  In-Stat/MDR.  “IP  is  getting  a  bigger 
share  of  a  smaller  pie." 


make  IP  telephone  connections  —  are 
favored  by  businesses  seeking  most  of 
the  benefits  of  IP  telephony  without 
having  to  rip  out  their  existing  voice 
network  telephone  systems.  The  final 
choice  for  IT  organizations  is  driven  as 
much  by  external  factors,  such  as 
moves  and  the  addition  of  remote  of¬ 
fices,  as  by  the  two  systems’  benefits. 


When  the  Cancer  Therapy  &  Re¬ 
search  Center  consolidated  its  offices 
from  three  buildings  into  two  and  ex¬ 
panded  its  headquarters,  where  most 
of  its  900  PCs  and  servers  and  800 
telephones  reside,  Luter’s  team  evalu¬ 
ated  hybrid  PBXs  from  Avaya  Inc.  and 
Nortel  before  settling  on  an  IP  telepho¬ 
ny  setup  from  Cisco. 

Luter  says  Cisco  was  a  “premium 
environment,”  but  other  factors  offset 
that  expense.  For  starters,  the  center 
saved  more  than  $58,000  by  running  a 
single  wire  for  voice  and  data.  Cisco’s 
history  as  a  data  networking  vendor 
appealed  to  Luter  because  the  center 
routinely  transmits  enormous  medical 
imaging  files  between  facilities. 
Another  benefit  is  the  simplified  help 
desk  structure  that  comes  with  a 
single  data-and-voice  network. 

“We’ve  got  Windows,  Unix  ma¬ 
chines  and  Macintoshes,  so  our  help 
desk  faces  some  pretty  complex 
needs,”  Luter  says.  “At  least  now  we 
don’t  have  one  group  for  the  phones 
and  one  for  the  computers;  IT  sup¬ 
ports  everything.”  He  adds  that  getting 
phone  extensions  set  up  for  new  hires 
used  to  take  up  to  two  weeks  but  is 
now  accomplished  in  less  than  a  day. 

Addressing  one  widespread  concern 
about  IP  telephony,  Luter  says  the  cen¬ 
ter  built  redundancies  for  its  phone 
system  into  its  storage-area  network 
(SAN).  Each  facility  has  a  redundant 
pair  of  Cisco  SN  5428  SAN  servers. 

Some  analysts  worry  that  redundan¬ 
cy  and  fail-over,  which  have  been 
honed  for  100  years  in  the  switched- 
circuit  world,  haven’t  yet  been  suffi¬ 
ciently  addressed  in  IP  telephony  sys¬ 
tems.  “By  their  very  nature,  basic  PBXs 
provide  fail-over  resiliency  in  the 
trunks  going  to  the  [telephone  service 
provider’s]  central  office,”  says  Laurie 
Gooding,  an  analyst  at  Phoenix-based 
Synergy  Research  Group.  “An  IP  sys¬ 
tem  doesn’t  provide  that.” 

Gooding  adds  that  “some  vendors 
have  been  slow”  to  provide  redundan¬ 
cy  in  their  IP  signaling  interfaces  — 
that  is,  the  backup  system  that  kicks  in 
if  a  server  goes  down. 

But  NFL  Films  has  used  IP  telephony 
for  its  450  phones  since  July  2001,  and 
Steve  Eager,  director  of  network  and 


While  some  companies  are  taking  the  plunge  into 
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IP/PBX  Hybrid 

Network  Diagram:  PPL,  Allentown  and  Harrisburg,  Pa. 
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Pure  IP  Telephony  System 

Network  Diagram:  Cancer  Therapy  &  Research  Center 


systems  administration,  believes  he 
has  planned  for  almost  any  problem  — 
with  one  possible  exception. 

The  Mount  Laurel,  N.J.-based  chron¬ 
icler  of  professional  football  is  on  a 
Synchronous  Optical  Network  (Sonet) 
ring  with  separate  fiber  lines  into  each 
of  its  two  connected  buildings.  For  re¬ 
dundancy,  each  building  gets  a  voice 
gateway,  a  Cisco  Catalyst  6509  switch 
and  a  Cisco  Call  Manager  Server  (the 
servers  are  clustered). 

“We’re  fully  redundant,”  Eager  says, 
noting  one  exception:  Each  of  the  com¬ 
pany’s  eight  closet  switches  is  homed 
to  a  single  6509  switch.  “If  we  lost  a 
closet  switch,  we’d  lose  the  phones  at 
that  closet,”  he  says,  adding  that  this 
has  never  occurred. 

Many  analysts  agree  with  Brian 
Strachman,  an  analyst  at  In-Stat/MDR 
in  Scottsdale,  Ariz.,  who  says,  “The 
fear  factor  in  IP  telephony  is  gone  in 
the  last  year  or  so  —  they’ve  worked 
out  most  of  the  bugs.  Whether  you  buy 
a  [hybrid]  system  or  a  pure  IP,  you’re 
safe  in  terms  of  redundancy.” 

One  advance  in  current  hybrid  PBXs 
is  peer-to-peer  IP  switching.  In  early 
hybrids,  voice-over-IP  (VOIP)  commu¬ 


nication  involved  translating  from  tra¬ 
ditional  voice  time-division  multiplex¬ 
ing  (TDM)  to  IP,  then  back  to  TDM. 
This  round  trip  introduced  the  possi¬ 
bility  of  poor  voice  quality  due  to  la¬ 
tency.  Peer-to-peer  IP  connectivity  is 
“a  cleaner  way  to  accomplish  VOIP,” 
says  Jay  Lassman,  an  analyst  at  Stam¬ 
ford,  Conn.-based  Gartner  Inc. 

Vendor  Pros  and  Cons 

Some  IT  organizations  opt  for  hybrid 
PBXs  over  pure-play  IP  systems  even 
when  they’re  moving  toward  full  IP 
telephony.  Bow  Valley  College  in  Cal¬ 
gary,  Alberta,  implemented  IP  telepho¬ 
ny  in  January  2002.  Shortly  after  send¬ 
ing  out  its  request  for  proposals,  the 
college  narrowed  its  choices  to  Cisco, 
Nortel  and  Alcatel.  IT  manager  Mike 
Shannon  led  a  team  that  believed  Nor¬ 
tel  lacked  a  “clear  strategy”  on  IP  tele¬ 
phony,  leaving  Paris-based  Alcatel  and 
Cisco  as  finalists. 

Misgivings  over  Cisco’s  experience 
with  voice  networks  prompted  Bow 
Valley  to  choose  an  Alcatel  OmniPCX 
system.  “Cisco  concerned  us  because 
they  weren’t  voice-based;  we  weren’t 
sure  they  understood  voice  enough,” 


Shannon  says.  “And  we  weren’t  thrilled 
at  the  thought  of  running  our  voice 
over  Windows  2000  —  we  need  five  9s 
reliability  for  our  voice  traffic.” 

Shannon  says  the  hybrid  PBX  offers 
the  advantages  of  IP  telephony  —  sim¬ 
plified  management  with  Alcatel’s 
OmniVista  network  management  tool, 
a  single  architecture  and  an  automated 
move/add/change  procedure  —  with 
flexibility  not  found  in  pure  IP  systems, 
such  as  the  ability  to  run  fax  machines 
from  analog  ports.  Like  other  newer  hy¬ 
brid  PBXs,  OmniPCX  supports  analog, 
digital,  IP,  wireless  and  soft  phones. 

Thomas  Dunkerley,  IT  communica¬ 
tions  manager  at  The  Seattle  Times, 
concurs  with  Shannon’s  assessment  of 
the  trade-offs  between  a  data-centric 
vendor  like  Cisco,  3Com  Corp.  or  Sun¬ 
nyvale,  Calif.-based  Shoreline  Commu¬ 
nications  Inc.  on  the  one  hand  and  a 
voice-centric  vendor  like  Avaya,  Nortel 
or  Siemens  AG  on  the  other.  When  the 
newspaper  decided  to  replace  its  10- 
year-old  Avaya  Definity  PBX,  it  ex¬ 
plored  Cisco’s  pure-play  IP  system  and 
hybrid  PBXs,  and  Avaya  emerged  as 
the  leading  hybrid  candidate. 

To  Dunkerley  and  his  team,  all  of 
whom  had  experience  with  telecom¬ 
munications,  a  drawback  to  the  Cisco 
products  soon  became  apparent.  At 
The  Seattle  Times,  each  phone  includes 
three  call  “appearances,”  or  number 
listings.  PBXs  use  a  single  port  for 
each  phone;  with  Cisco,  each  appear¬ 
ance  would  count  as  a  port. 

“That  would  have  tripled  my  licens¬ 
es,”  Dunkerley  says.  He  adds  that  this 
anomaly  is  probably  an  example  of 
Cisco’s  roots  in  the  data  world. 

The  newspaper  opted  for  Avaya, 
partly  because  it  was  the  only  vendor 
whose  products  comply  with  Ameri¬ 
cans  With  Disabilities  Act  guidelines 
(offering  simultaneous  audio  and  visu¬ 
al  paging,  for  example),  but  Dunkerley 
says  there  were  trade-offs  involved. 

“Avaya’s  not  as  focused  on  data  as 
Cisco  is,”  Dunkerley  says,  citing 
Avaya’s  Cajun  P330  switching  system. 
“My  network  techs  tell  me  the  basics 
and  functionality  are  all  there  but  that 
the  Cisco  user  interface  is  cleaner, 
making  management  a  bit  easier,”  he 
says.  The  newspaper  has  moved  300 
end  users  to  IP  phones,  and  750  more 
are  on  tap  for  the  next  three  months. 

Enterprise  telephony  is  moving  to¬ 
ward  IP;  there  is  little  doubt  about  that. 
The  question  is,  Do  you  want  to  take 
one  giant  —  but  irreversible  —  step  to¬ 
day,  scrap  everything  and  go  for  pure- 
play  IP?  Or  do  you  want  to  take  baby 
steps  and  install  a  hybrid  PBX,  bridg¬ 
ing  past  to  future?  For  NFL  Films’  Ea- 
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Hybrids,  Layer  by  Layer 

First-generation  hybrid  PBXs  had  a 
circuit  switch  at  their  cores.  Port 
cards  made  it  possible  to  use  IP 
phones  but  not  to  take  advantage  of 
advanced  applications  designed  for  IP 
telephony. 

Most  PBX  vendors  today,  how¬ 
ever,  offer  systems  that  don’t  have 
an  integral  switching  fabric.  Today’s 
hybrids  have  migrated  to  a  packet- 
driven  architecture  that  separates 
communications  management  from 
the  core.  They  tend  to  be  modular 
software  stacks  composed  of  the 
following  layers: 


■  A  voice  layer,  where  actual  voice 
traffic  (nearly  an  afterthought)  is  direct¬ 
ed  to  IP  telephones,  “soft  clients"  such 
as  desktop  PCs  (with  a  headset 
plugged  into  their  Universal  Serial  Bus 
ports,  a  common  practice  in  call  cen¬ 
ters)  and  traditional  phones. 

■  A  feature-set  layer,  where  features 
such  as  hold,  forwarding  and  conference¬ 
calling  are  determined  and  controlled. 


■  An  application  programming  inter¬ 
face  (API)  layer,  which  includes  hooks 
for  other  applications  such  as  CRM 
software  and  network  management 
tools.  These  APIs  are  critical  in  today’s 
modular  world.  An  IT  organization  using 
a  HiPath  4000  from  Siemens,  for  exam¬ 
ple,  might  use  Hewlett-Packard  Co.'s 
OpenView  management  software  and  a 
Siebel  Systems  Inc.  CRM  suite.  The 
HiPath  4000  includes  APIs  to  make 
such  integration  easy,  according  to 
Joan  Vandermate,  vice  president  of 
product  management  at  Siemens. 


■  A  gateway  layer,  which  must  even¬ 
tually  be  connected  to  a  public  switched 
telephone  network,  no  matter  how 
much  corporate  network  traffic  is  IP- 
based.  At  the  gateway  layer,  a  physical 
device  converts  IP  packets  for  trans¬ 
mission  over  DS0  circuits. 


■  A  call-control  layer,  where  the  class 
of  service  (such  as  limitations  on  interna¬ 
tional  dialing),  security  policies  and  a  data¬ 
base  of  registered  users  are  determined. 

-  Steve  Ulfelder 

ger,  the  giant  step  worked.  “You  have 
your  Windows  guys  doing  PCs  and 
servers,  and  your  Cisco  guy  doing  all 
your  networking  —  including  phones,” 
he  says.  “What’s  simpler  than  that?”  I 


Ulfelder  is  a  freelance  writer  in 
Southboro,  Mass.  Contact  him  at 
sulfelder@charter.net. 
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Conmiters 

That 


Persuasive 
technologies 
are  aimed  at 
changing  users’ 
attitudes  and 
behaviors.  By 
Matt  Hamblen 


w 


E  ALL  KNOW 


ways  that  com¬ 
puters  employ 
psychology  to 
change  our  atti¬ 
tudes  or  behaviors. 

Mostly,  we  see  it  on  Web 
sites.  A  widely  used  technique 
involves  providing  a  fun  game 
to  play  or  a  captivating  video 
that  might  have  no  other  pur¬ 
pose  than  to  get  us  to  linger  on 
a  site  or  bookmark  it. 

If  we  e-mail  a  link  for  the 
site  to  a  friend,  the  site  and  its 
technology  and  designers  have 
altered  our  behavior  slightly. 
The  process  creates  a  new  at¬ 
titude  or  alters  an  old  one 
about  the  site  or  the  brand  and 


products  behind  it. 

Web  sites  and  applications 
use  a  growing  variety  of  per¬ 
suasive  techniques  to  alter  our 
attitudes  and  behaviors,  and 
after  the  bursting  of  the  dot¬ 
com  bubble,  there  is  increas¬ 
ing  interest  in  “stepping  back 
to  see  what  really  works  and 
persuades,”  says  B.J.  Fogg,  di¬ 
rector  of  the  Persuasive  Tech¬ 
nology  Lab  at  Stanford  Uni¬ 
versity.  He  also  coined  the 
term  captology,  the  science  of 
using  “computers  as  persua¬ 
sive  technologies.” 

In  the  coming  years,  Fogg 
says,  captology  is  likely  to 
challenge  IT  managers  and  tra¬ 
ditional  business  leaders,  who 


will  see  persuasive  techniques 
become  an  important  part  of 
business  training,  manage¬ 
ment  coaching  and  marketing. 

He  says  captology  will  be 
used  to  motivate  people  to 
make  better  use  of  computers 
by  offering  helpful  hints  when 
problems  occur  in  early  uses 
of  a  new  application.  Applica¬ 
tions  will  send  e-mails  that 
praise  workers  for  trying 
them,  Fogg  says. 

Captology  will  require  de¬ 
velopers  to  understand  behav¬ 
ioral  science  as  it  applies  to 
technology,  Fogg  says.  “IT 
managers  might  not  think  cap¬ 
tology  is  appropriate  for  com¬ 
puters  and  will  ask  why  per¬ 
suasion  should  be  a  part  of  it,” 
he  says.  “They  will  wonder, 
‘Does  this  work,  and  is  this 
relevant  to  my  compa¬ 
ny  or  job?’  ” 

Fogg  ticks  off  a  list 
of  applications  and 
laboratory  studies  in¬ 
dicating  that  captology 
does  indeed  work.  In  studies 
of  human/computer  reciproci¬ 
ty,  users  were  discovered  to  be 
far  more  willing  to  do  simple 
tasks  for  a  computer,  such  as 
signing  up  for  a  newsletter  or 
upgrading  software,  if  the 
computer  had  provided  them 
useful  information  and  told 
them  so.  “The  computer 
points  to  good  work  it’s  done 
for  you,  much  as  a  good  em¬ 
ployee  tells  a  boss,  ‘I’ve  done 
this  and  this,’  before  asking  for 
a  raise,”  he  says. 

For  example,  Fogg  says,  a 
successful  virus-protection 
program  could  be  even  more 
successful  if  it  counted  how 
many  times  it  blocked  a  virus 
on  a  computer  and  when,  then 
reported  that  information  to 
the  user  before  reminding  him 
to  upgrade  or  renew. 

RSIGuard  Software  in  Santa 
Cruz,  Calif.,  has  developed 
software  that  helps  users  pro¬ 
tect  against  repetitive-stress 
injuries  by  monitoring  how 
much  they  use  the  keyboard 
and  mouse  and  encouraging 
them  to  take  regular  breaks 
when  at  work.  They  are  per¬ 
suaded  to  use  the  program  be¬ 
cause  it’s  seen  as  offering  re¬ 
lief  and  because  it  can  be  tai¬ 
lored  to  suit  the  individual’s 
workstyle  and  tolerances,  says 


Ron  Goodman,  a  project  man¬ 
ager  at  RSIGuard. 

Another  example  of  captol¬ 
ogy  is  America’s  Army,  a  sim¬ 
ulation  and  online  game  creat¬ 
ed  to  provide  insights  about 
U.S.  Army  life,  teamwork  and 
training.  The  game,  which  cost 
$10  million  to  develop,  is  part 
of  the  Army’s  official  commu¬ 
nications  strategy,  according 
to  an  explanation  on  the  www. 
americasarmy.com  Web  site. 

Fogg  says  the  site  has 
“worked  in  spades”  at  bringing 
in  recruits  who  are  excited  by 
the  computer-based  experi¬ 
ences.  It  has  worked  so  well 
that  it’s  “kind  of  scary,  to  be 
honest,”  adds  Fogg,  who  wor¬ 
ries  that  there  might  not  be 
enough  checks  and  balances 
to  protect  people  from  gov¬ 
ernment  abuse  of 
powerful  persuasive 
techniques. 

U.S.  Army  Col. 
Casey  Wardynski,  the 
creator  of  America’s 
Army,  says  the  game  has  be¬ 
come  one  of  the  most  popular 
online  games  globally  since  it 
was  launched  in  July.  He 
agrees  that  it  uses  many  per¬ 
suasive  technologies,  but  only 
at  a  very  early  stage  in  the  re¬ 
cruiting  process. 

Fogg  says  that  many  appli¬ 
cations  of  captology  in  the 
workplace  are  coming.  They 
include  everything  from  using 
behavioral  science  in  software 
in  order  to  increase  output  per 
employee  in  a  call  center  to 
improving  managers’  skills, 
especially  with  delegating,  set¬ 
ting  goals  and  getting  people 
to  arrive  at  meetings  on  time. 

The  trick,  Fogg  believes,  will 
be  getting  developers  to  write 
software  that  motivates  based 
on  positive  rewards,  remind¬ 
ing  users  that  they  will  be  hap¬ 
pier  and  better  at  their  jobs  if 
they  take  certain  actions. 

“IT  shops  will  have  a  role  in 
integrating  all  of  these  cap- 
tologies,”  Fogg  adds.  I 

UNDER  THE  INFLUENCE 

To  learn  more  about  some  technologies  that 
are  unpersuasive,  go  to: 

QuickLink  38073 

Corporate  IT  shops  could  learn  a  lot  from 
the  America's  Army  online  simulation  game: 

QuickLink  38265 
www.computerwoiid.com 
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Fighting  Spam 

DEFINITION 

g|  Software  that  controls  spam  — 

If  unsolicited  commercial  mass 
||  e-mail  sent  over  the  Internet  — 

}|  uses  techniques  such  as  black- 
||  listing  or  “whitelisting”  particu- 
I  lar  URLs  or  domain  names,  and 
p  includes  self-learning  programs 
jftl  based  on  statistical  analysis. 


BY  RUSSELL  KAY 

VERY  DAY  most  of 
us  get  e-mail  offer¬ 
ing  to  sell  us  drugs 
(especially  Viagra), 
vacations,  ways  to 
enlarge  specific  parts  of  our 
bodies,  get-rich-quick 
schemes,  cable-television  de¬ 
scramblers,  lower  mortgage 
rates  and  Internet-based 
pornography.  I  don’t  want  it, 
and  neither  do  you.  Spam  has 
become  a  serious  and 
growing  problem  for 
Internet  users,  affect¬ 
ing  individuals  and 
corporations  alike. 

Spam  costs  its  recip¬ 
ients  money.  David 
Ferris,  president  of  San  Fran- 
cisco-based  Ferris  Research, 
estimates  that  spam  and  ef¬ 
forts  to  combat  it  cost  U.S. 
companies  $8.9  billion  in  2002. 

In  a  December  2002  report, 
Gartner  Inc.  analyst  Joyce 
Graff  predicted  that  “by  2004, 
unless  an  enterprise  takes  de¬ 
fensive  action,  more  than  50% 
of  its  message  traffic  will  be 
spam.”  Ferris  analyst  Marten 
Nelson  pegs  the  volume  of 
spam  at  20%  to  30%  of  corpo¬ 
rate  traffic  and  40%  to  50%  of 
Internet  service  provider  traf¬ 
fic.  Nelson  says  that  CIOs  and 
corporate  messaging  man¬ 
agers  should  consider  three 
major  elements  in  determin¬ 
ing  the  impact  of  spam. 

“First,  you  need  to  look  at 
the  costs  associated  with  loss 


of  user  productivity,  then  the 
cost  to  the  messaging  infra¬ 
structure  and  finally  the  cost 
to  your  help  desk  in  dealing 
with  user  complaints,”  he  says. 

Strategies 

There  are  dozens  of  products 
and  services  available  to  help 
block  spam.  They  use  the  fol¬ 
lowing  basic  techniques: 

■  Blacklist  the  sender.  Get  a 
list  of  spammers’  addresses 

and  block  any  e-mail 
from  those  addresses. 
This  can’t  block  spam 
from  new  addresses, 
however,  so  there’s  a 
constant  race  between 
the  spammers  and  the 
spam-fighters.  At  times,  the 
blockers  get  too  eager  and 
may  shut  off  all  mail  from  a 
specific  domain  name,  block¬ 
ing  legitimate  messages  from 
nonspamming  users. 

■  “Whitelist”  the  sender.  The 
opposite  approach  is  to  accept 
e-mail  only  from  a  list  of  ap¬ 
proved  addresses.  This  is 
highly  effective  but  not  terri¬ 
bly  practical,  especially  for 
business  users  who  want  to 
hear  from  new  customers. 

■  Look  for  telltale  signs.  Spam 
messages  tend  to  have  a  lot  of 
features  in  common.  Accord¬ 
ing  to  CipherTrust  Inc.,  some 
of  the  more  common  elements 
found  in  the  subject  lines  of 
spam  are  “$,”  “!,”  “999,”  “Cred¬ 
it,”  “Earn,”  “FREE,”  “Free,” 
“Get,”  “Lose”  and  “Money.” 


■  Keep  score.  Much  antispam 
software  relies  on  analyzing 
message  IDs,  formats  and  oth¬ 
er  traits,  assigning  values  to 
each  identified  feature  and 
adding  up  a  numerical  score 
for  new  messages.  If  the  score 
exceeds  a  specified  limit,  it’s 
considered  spam  and  is 
blocked.  Unfortunately,  this 
approach  delivers  a  lot  of  false 
positives,  rejecting  mail  that 
isn’t  spam. 

■  Learn  as  you  go.  The  most 
promising  approach  seems  to 
be  Bayesian  filtering,  which  is 
based  on  statistical  analysis. 
With  this  method,  you  train  the 
software  by  classifying  mail  as 
spam  or  nonspam.  Based  on 
your  classifications,  the  soft¬ 
ware  analyzes  new  messages 
and  determines  the  probabil¬ 
ity  that  they  may  be  spam. 
Bayesian  programs  continually 
learn,  and  if  a  spam  message 
slips  through,  you  tell  the  pro¬ 
gram  and  it  becomes  smarter. 

Tips  for 
Avoiding  Spam 

There  are  ways  you  can  fight 
spam  in  addition  to  software 
tools,  including  the  following: 

■  Don’t  opt  out.  Your  opt- 
out  or  “unsubscribe”  reply 
merely  confirms  your  valid 
e-mail  address  and  is  likely  to 
get  you  more,  not  less,  spam. 

■  Stop  giving  away  your 
address.  In  March  2003,  the 


the  Eeonamfes 
Of  Spam 

'AIL 

Cost:  25  cents  per  piece 
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Cost:  one  hundredth  of  a 
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Washington-based  Center  for 
Democracy  and  Technology 
reported  on  research  into 
where  spammers  get  their  ad¬ 
dresses.  The  overwhelming 
source  (97%)  was  public  Web 
sites.  In  fact,  every  single  nor¬ 
mal  address  they  posted  on  a 
Web  site  received  some  spam. 
They  also  obscured  some 
addresses  by  making  them 
look  like  running  text  (joe@ 
mycompany.com  becomes 
“joe  at  mycompany  dot  com”) 
or  by  converting  them  to 
HTML  (Joe’s  address  now 
reads  &#106;&#111;&#101; 
&#064;&#109;&#121;&#099; 
&#111;&#109;&#112;&#097; 
&#110;&#121;&#046;&#099; 
&#111;&#109;).  Obscured  ad¬ 
dresses  got  no  spam  at  all. 

■  Counterattack  the  spammers. 
Alan  Ralsky,  who  has  been 
previously  convicted  of  fraud, 
is  possibly  the  world’s  premier 
spammer,  sending  out  upward 
of  a  billion  e-mails  a  day.  After 
Slashdot.com  publicized  a 
Detroit  Free  Press  article  on 
Ralsky  and  listed  his  home 
address,  the  antispam  commu¬ 
nity  signed  him  up  for  numer¬ 
ous  ad  campaigns  and  multi¬ 
ple  mailing  lists.  Ralsky  has 
since  been  inundated  with 
truckloads  of  brochures,  ads 
and  catalogs,  all  delivered  by 
the  U.S.  Postal  Service  to  his 
brand-new  $740,000  home 
in  West  Bloomfield,  Mich. 
Ralsky,  unamused,  considers 
this  harassment. 

The  Bottom  Line 

Spam  seems  here  to  stay.  It’s 
too  easy,  too  cost-effective  and 
too  cheap  to  kill  entirely.  But 
we  can  take  effective  mea¬ 
sures  to  block  most  of  it. 

“Yes,  it’s  a  cat-and-mouse 
game  between  the  spammers 
and  the  antispam  vendors,  but 
I  believe  the  antispam  vendors 
will  win,”  says  Ferris  Re¬ 
search’s  Nelson.  “In  the  next 
five  years  or  so,  we  will  look 
at  the  spam  problem  much  as 
we  look  at  viruses  today.  It 
used  to  be  a  serious  problem, 
but  now  it’s  fairly  well  under 
control.”  I 


Kay  is  a  Computerworld  con¬ 
tributing  writer  in  Worcester, 
Mass.  You  can  contact  him  at 
russkay@charter.net. 
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Enterprise-Class 

Spam-Fighters 

PureMessage  3.0 

ActiveState  Corp. 

Vancouver,  British  Columbia 

www.activestate.com/ 

products/puremessage 

BrightMail  Anti-Spam  Enter¬ 
prise  Edition,  Release  4.5 

Brightmail  Inc. 

San  Francisco 

www.brightmail.com/ 

enterprise-as.html 

IronMail 

CipherTrust  Inc. 

Alpharetta, Ga. 

www.ciphertrust.com/ 

ironmail/ 

Authority 

Cloudmark  Inc. 

San  Francisco 

www.cloudmark.com/ 

products/authority/ 

Gordano  Messaging  Suite 

Gordano  Ltd. 

North  Somerset,  England 

www.gordano.com/ 

technology/anti-spam.htm 

Lyris  MailShield  Server 

Lyris  Technologies  Inc. 
Berkeley,  Calif. 
www.lyris.com/products/ 
mailshield/ 

MailFrontier 
Anti-Spam  Gateway 

MailFrontier  Inc. 

Palo  Alto,  Calif. 

www.mailfrontier.com/ 

enterprise_overview.html 

SpamKiller 

Network  Associates  Inc. 
Santa  Clara,  Calif. 
www.networkassociates.com 


Postini 

Postini  Corp. 

Redwood  City,  Calif. 
www.postini.com/services/ 

Proofpoint  Protection  Suite 

Proofpoint  Inc. 

Cupertino,  Calif. 

www.proofpoint.com/ 

product-mps-mod-spam.html 


SPAM  FROM  THE  START 


For  more  information  on  spam  and  spam¬ 
fighting,  and  where  the  word  spam  comes 
from,  visit  our  Web  site: 


OQuickLinks  38243  and  38244 
www.computerworld.com 


Are  there  technologies  or  issues  you'd  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworld.com 

To  find  a  complete  archive  of  our 
QuickStudies.  go  online  to 

Ocomputerworld.com/quickstudies 
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Reserve  Call-up  Hits 
IT  Security  Department 


When  an  IT  security  manager  gets  the  call, 
the  rest  of  the  staff  is  left  to  pick  up  the 
pieces.  By  Mathias  Thurman 


AS  IF  THE  EVERYDAY 

stress  of  my  informa¬ 
tion  security  job  were 
not  enough,  our  depart¬ 
ment  was  hit  with  a  bombshell. 
I’m  in  the  U.S.  Air  Force  Re¬ 
serve,  and  my  unit  activated 
me.  I’ve  been  out  of  the  office 
for  a  couple  of  weeks  now,  and 
I’m  attempting  to  contribute  at 
work  as  best  I  can  using  my 
laptop  and  cell  phone. 

I  got  the  call  on  a 
Thursday  and  had  to 
report  to  the  base  the 
next  day  to  sign  in. 

Fortunately,  I  live  near 
the  base,  so  I’m  able  to 
return  home  on  the 
weekends.  I  received 
word  just  prior  to  the  war  that 
I  was  going  to  be  activated,  so 
I  was  able  to  give  my  boss  and 
security  team  advance  warn¬ 
ing.  They  weren’t  happy,  but 
they  were  supportive  and 
seemed  more  concerned  that  I 
return  home  safely  than  that  I 
deal  with  unfinished  business 
before  my  departure. 

By  law,  my  company  must 
let  me  participate  in  the  Re¬ 
serve  and  must  hold  my  posi¬ 
tion  for  me  until  I  return.  Al¬ 
though  companies  are  re¬ 
quired  to  hold  reservists’  jobs, 
they  aren’t  required  to  pay 
them  while  they’re  gone. 

Fortunately,  my  company 
will  continue  to  pay  me  for  the 
first  six  months  of  activation. 
That’s  a  pretty  good  deal, 
since  the  difference  between 
military  and  civilian  pay  is 
steep.  (For  some  of  my  peers, 
the  pay  difference  has  been 
devastating.)  Hopefully,  I’ll  be 
released  before  the  full  six 
months  are  up. 

In  preparing  for  my  depar¬ 
ture,  I  transferred  as  many  of 
my  duties  as  possible  to  the 


staff.  Right  now,  my  major 
projects  include  deploying  a 
wireless  LAN,  centralizing 
Unix  authentication,  perform¬ 
ing  application  assessments 
and  attending  architecture  re¬ 
view  meetings  for  current  and 
proposed  applications.  My 
other  duties  include  things  like 
documenting  policy,  proce¬ 
dures  and  standards;  conduct¬ 
ing  investigations;  and  han¬ 
dling  the  administra¬ 
tion  of  some  critical 
security  applica¬ 
tions.  I  compiled  a 
list  of  all  of  these 
tasks  and  ap¬ 
proached  my  staffers 
to  see  who  wanted 
to  take  over  what.  Although 
everyone  is  already  stretched 
thin,  they  all  pitched  in  and  re¬ 
lieved  me  of  the  critical  duties 
that  I  can’t  perform  remotely. 
For  now,  I’m  still  available  by 
cell  phone  and  e-mail  when 
questions  or  issues  arise. 

Remote  Mode 

As  a  full-time  telecommuter, 
I’m  using  my  company’s  Cisco 
virtual  private  network  (VPN) 
concentrators  for  LAN  access. 
Although  the  performance 
isn’t  as  fast  as  it  would  be  if  I 


Between  the  VPN, 
teleconferencing 
and  additional 
telephone  commu¬ 
nication,  I  have 
managed  to  still  be 
somewhat  effective. 


were  at  my  desk,  it  has  been 
sufficient  to  allow  me  to  get 
work  done  when  I’m  off  duty 
from  my  new  day  job.  My  de¬ 
partment  also  has  a  weekly 
staff  meeting,  which  I  have  at¬ 
tended  via  teleconference. 

Between  the  VPN,  telecon¬ 
ferencing  and  additional  tele¬ 
phone  communication,  I  have 
managed  to  still  be  somewhat 
effective.  But  there’s  a  limit  to 
what  I  can  do.  If  I’m  deployed 
to  the  Middle  East,  Internet 
access  may  not  be  available 
for  my  civilian  work.  And  even 
if  I  do  have  access,  the  perfor¬ 
mance  might  degrade.  Also, 
many  military  firewalls  block 
VPN  traffic  to  IP  addresses 
that  don’t  belong  to  the  .mil 
domain  name.  So  I’m  prepar¬ 
ing  for  the  worst. 

This  week,  I  moved  tem¬ 
porarily  to  another  base  in  the 
U.S.  that,  fortunately,  provides 
high-speed  Internet  access.  So 
I  used  the  VPN  connection  to 
access  my  company’s  newly 
installed  WLAN  management 
tool,  the  AirWave  Manage¬ 
ment  Platform  (AMP),  which 
we  just  purchased  from  San 
Mateo,  Calif.-based  AirWave 
Wireless  Inc.  Not  only  was  I 
able  to  check  on  the  status  of 
the  dozens  of  access  points 
(AP)  located  throughout  the 
corporate  campus,  but  I  also 
completed  a  rogue  AP  detec¬ 
tion  scan. 

AMP  uses  two  methods  for 
rogue  detection.  The  wireless 
detection  mode  works  by 
switching  some  of  our  APs 
into  promiscuous  mode.  We 
primarily  use  Cisco  AP  1200s, 
but  we  have  some  units  from 
3e  Technologies  International 
Inc.  in  Rockville,  Md.,  spread 
across  our  campus  that  we  use 
exclusively  for  wireless  AP  de¬ 
tection. 

The  second  rogue  AP  detec¬ 
tion  method  involves  a  wire- 
line  AP  scan.  With  this  fea¬ 
ture,  the  AMP  system  initiates 


a  scan  of  the  designated  net¬ 
work  and  probes  for  signa¬ 
tures  that  resemble  an  AP.  The 
AMP  interrogates  an  IP  ad¬ 
dress  and  port  and  can  deter¬ 
mine  the  type  of  AP  by  exam¬ 
ining  the  return  packets  from 
the  interrogated  IP  address. 

This  feature  requires  some 
additional  configuration,  be¬ 
cause  I  have  to  ensure  that  I 
don’t  scan  network  addresses 
that  aren’t  within  my  compa¬ 
ny.  In  addition,  scans  have  to 
be  coordinated  so  the  security 
analysts  don’t  panic  as  a  result 
of  what  might  look  like  a  coor¬ 
dinated  port-scan  attack. 

This  time  around,  my  scan 
didn’t  detect  any  rogue  APs. 
Employees  seem  more  cog¬ 
nizant  of  our  AP  detection  ca¬ 
pabilities  and  the  ramifica¬ 
tions  of  the  discovery  of  a 
rogue  AP  (we  confiscate  the 
AP,  and  the  employee  faces 
disciplinary  action).  I  now 
have  set  a  schedule  for  scan¬ 
ning  each  of  our  networks  on 
a  regular  basis.  I’ve  automated 
as  much  of  this  as  possible, 
but  it  still  requires  coordina¬ 
tion,  and  I’d  rather  control  the 
execution  of  the  scanning  my¬ 
self  if  I  can. 

In  addition  to  participating 
in  the  management  of  the 
wireless  network  infrastruc¬ 
ture,  I  hope  to  continue  to  per¬ 
form  a  limited  number  of  ap¬ 
plication  assessments. 

I  remain  hopeful  that  I  will 
be  released  from  my  Reserve 
duties  sometime  soon  so  that  I 
can  return  to  full-time  duties 
on  my  security  team.  I 

WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  "Mathias  Thurman," 
whose  name  and  employer  have  been 
disguised  for  obvious  reasons.  Contact  him 
at  mathias_thurman@yahoo.com,  or  join  the 
discussion  in  our  forum: 

Quicklink  a!590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

O  computerwoiid.com/secjournal 
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Security  Bookshelf 

Practical  Unix  &  Internet 
Security,  3rd  Edition,  by  Sim- 
son  Garfinkel,  Alan  Schwartz 
and  Gene  Spafford;  O’Reilly  & 
Associates;  Feb' 
ruary2G03. 

Thiscomprehen-  :  Practical 
sive,  954-page 
tome,  which  fo¬ 
cuses  on  Solaris, 

Mac  OS,  Linux 
and  FreeBSD, 
starts  out  with 
the  fundamentals 
but  soon  dives  into  more  tech¬ 
nical  aspects  of  Unix  adminis¬ 
tration  and  security.  I  found 
the  sections  on  Pluggable  Au¬ 
thentication  Modules,  Light¬ 
weight  Directory  Access  Pro¬ 
tocol,  Samba,  wireless  tech¬ 
nologies  and  intrusion  defec¬ 
tion  particularly  useful.  The 
checklists  covering  forensics 
and  incident  response  are  also 
worth  a  look. 

-Mathias  Thurman 


HFL 

Certification 

The  Wi-Fi  Alliance  has  un¬ 
veiled  its  latest  certification 
for  wireless  LAN  devices, 
Wi-Fi  Protected  Access.  The 
specification  covers  security 
features  that  increase  data 
protection  and  access  control 
on  WLANs,  and  it  will  be  able 
to  run  on  existing  802.11a  and 
802.11b  hardware  as  a  soft¬ 
ware  upgrade,  according  to 
the  organization. 


Dr.  Watson 
Corporate  Edition 

Microsoft  Corp.  will  offer  cor¬ 
porate  customers  a  version  of 

pa  j.  Bit  a.  ji.fli  ,1  a  a  mm  vAin  n 

fils  air.  waiscn  error-reporting 
fool  to  help  administrators  pin¬ 
point  and  solve  software  prob¬ 
lems,  the  vendor  announced. 
“The  idea  is  to  extend  Online 
Dr.  Watson  and  give  the  corpo¬ 
rate  software  developer  the 
ability  to  analyze  issues  in  their 
applications  so  they  can  pro- 


vice  president  of  Microsoft’s 
security  business  unit.  No  re¬ 
lease  schedule  has  been  made 
public  yet. 
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XAware  Upgrades 
Integration  Server 

XAware  Inc.  last  week  announced 
XA-Suite  3.0  for  Java.  The  up¬ 
grade  includes  new  features  for 
streaming  large  XML  documents, 
XML-to-XML  mapping  to  simplify 
schema  transformation,  function¬ 
ality  for  flexible  data  manipulation 
and  mapping  to  business  rules, 
and  increased  support  for  stored 
procedures  with  relational  data¬ 
bases,  according  to  the  Colorado 
Springs-based  company. 

XA-Suite  for  Java  3.0  is  avail¬ 
able  now  and  is  priced  from 
$5,000  to  $50,000,  depending 
on  processor  and  connectivity  re¬ 
quirements,  the  company  said.  It 
is  also  available  for  evaluation  at 
www.xaware.com. 


Nortel  Introduces 
Layer  2  Switch 

Nortel  Networks  Ltd.  in  Bramp¬ 
ton,  Ontario,  last  week  introduced 
the  BayStack  470-24T 10/10000 
switch  for  Layer  2  connections 
in  large  companies.  The  switch 
is  designed  to  lower  complexity 
while  adding  quality-of-service 
functions.  Nortel  also  announced 
new  BayStack  Operating  System 
Switching  Software  that’s  de¬ 
signed  to  let  users  control  a 
stack  of  BayStack  devices  as  if 
they  were  a  single  system.  Both 
products  are  scheduled  to  ship 
later  this  month.  Pricing  wasn’t 
disclosed. 


Bitstream  Updates 
Wireless  Browser 

Bitstream  Inc.  in  Cambridge, 
Mass.,  last  week  released  a  new 
version  of  ThunderHawk,  its  wire¬ 
less  Web  browsing  technology. 
Upgrades  to  the  Enterprise  Edi¬ 
tion  include  features  designed  to 
improve  and  simplify  installation, 
a  new  Linux  installer  and  the  abil¬ 
ity  to  scale  to  64  concurrent 
users,  twice  as  many  as  previous 
versions  were  able  to  handle. 
ThunderHawk  runs  on  the  Pocket 
PC  operating  system.  To  down¬ 
load  a  free,  30-day  trial  version, 
visit  www.bitstream.com. 


PAUL  A.  STRASSMANN 


Enterprise 
Software’s  End 


SUPPLIERS  of  enterprise  resource  planning 
software  are  headed  for  a  dead  end.  Systems 
integration  from  now  on  will  be  accom¬ 
plished  by  networks  that  can  make  diverse 
systems  interoperate  without  being  forced 
into  any  one  vendor’s  architecture. 


Since  the  early  1990s, 

ERP  vendors  have  insisted 
that  companies  will  cut 
costs  and  improve  produc¬ 
tivity  by  investing  in  tightly 
integrated  end-to-end  ERP. 

These  systems  promise  to 
automate  business  processes 
into  an  all-embracing  archi¬ 
tecture  that  dictates  integra¬ 
tion  by  means  of  an  all- 
encompassing  data  ware¬ 
house.  Accordingly,  the 
goals  of  ERP  could  be 
achieved  best  by  using  soft¬ 
ware  from  one  supplier. 

The  alternative  —  integrating  a  multi¬ 
plicity  of  applications  offered  by  admit¬ 
tedly  superior  yet  specialized  suppliers 
—  was  scoffed  at  as  requiring  middle¬ 
ware  tools  and  time-consuming  integra¬ 
tion  efforts.  Extensive  testing  would  be 
required  as  changes  occurred.  Undesir¬ 
able  translation  logic  would  delay  trans¬ 
actions,  and  performance  would  suffer. 

Preintegrated  software  packages  were 
the  choice  of  many  organizations  seek¬ 
ing  simplification  in  information  proc¬ 
essing  and  escape  from  the  chaos  of 
software  proliferation. 

Billions  of  dollars  have  been  invested 
in  launching  organizations  on  a  march 
toward  synchronization  through  central¬ 
ization.  In  just  about  every  case  I  have 
examined,  the  driver  has  always  been 
the  finance  establishment.  They  wel¬ 
comed  the  opportunity  to  consolidate 
financial  systems.  The  real  agenda  was 
to  reassert  control  over  the  mess  left  by 
the  rapid  succession  of  failed  CIOs. 

The  reality  of  ERP  turned  out  to  be 
different  than  claimed.  Just  about  every 
ERP  system  would  be,  in  due  course,  ei¬ 
ther  aborted  or  truncated  when  bumped 


up  against  the  realities  of 
enterprisewide  systems 
integration.  Contrary  to 
claims  that  ERP  provides 
easy-to-use,  off-the-shelf 
solutions,  the  truth  is  that 
forced  conversions  from 
“legacy”  systems  are  hor¬ 
rendously  expensive  and 
traumatic  for  the  people 
who  work  with  them.  Many 
of  these  legacy  applications 
could  have  been  modern¬ 
ized  at  a  fraction  of  the  con¬ 
version  cost  by  updating 
their  data  formats  and  stan¬ 
dardizing  on  communications. 

And  few  ERP  systems  have  ever  been 
completed  as  originally  proposed.  Smart 
operators  never  let  go  of  systems  that 
gave  them  answers  they  needed.  Slip¬ 
ping  schedules,  budget  overruns  and 
user  revolts  forced  firms  to  purchase 
supplementary  solutions  from  a  variety 
of  small  suppliers.  Increasingly,  users 
had  to  divert  efforts  from  their  vendor- 
provided  standard  applications  to  fixes 
and  overlays  that  thwarted  hoped-for 
systems  integration. 

Why  do  I  now  pronounce  the  ERP 
era  as  coming  to  an  end?  The  answer  is 
Web-based  services  that  can  deliver  in¬ 
tegration  of  dissimilar  systems.  Web  ser¬ 
vices  make  it  possible  for  corporations 
to  plug  into  best-of-breed  suppliers  for 
rapid  acquisition  of  innovative  applica¬ 
tions.  Web  services  enable  pilot  tests 
that  can  verify  performance  before  the 
company  commits  to  implementation. 
They  offer  a  superior  architecture  for 
enterprisewide  integration  of  diverse, 
distributed  and  refurbished  “legacy”  ap¬ 
plications  that  can  remain  in  place  until 
gracefully  upgraded  or  retired.  Web  ser- 
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vices  promise  a  way  to  reduce  huge  de¬ 
velopment  budgets.  Web  services  avoid 
the  shock  of  forced  insertions  common¬ 
ly  associated  with  all  ERP  ventures  be¬ 
cause  they  can  be  trickled  into  the 
workplace  as  the  workforce  is  ready  to 
absorb  changes.  Web  services  smooth 
the  migration  from  hard-to-manage  (and 
insecure)  client/server  environments  to 
outsourced  network  service  providers 
that  offer  the  protection  of  experienced 
security  staffs. 

Web  services  accept  diversity  in  ap¬ 
plications  instead  of  a  single  application 
architecture  dominated  by  one  supplier. 
They  allow  integration  through  network 
message  sharing  (in  vendor-indepen¬ 
dent  universal  standard  formats  such  as 
XML)  instead  of  forcing  every  data  ele¬ 
ment  into  a  monolithic  data  repository. 

Rapid  replacement  of  failed  applica¬ 
tions  is  a  benefit  of  Web  services  as  is 
tactical  outsourcing  as  an  alternative  to 
emigrating  most  of  a  company’s  IT  to  a 
contractor  from  where  it  can  hardly 
ever  be  repatriated  and  never  reconsti¬ 
tuted.  Web  services  make  it  possible  to 
unburden  the  CIO  of  an  organization 
from  housekeeping  and  allow  him  to 
make  IT  a  source  of  competitive  advan¬ 
tage.  Through  loose  coupling  of  ser¬ 
vices,  the  Web  environment  is  more 
suited  to  the  prevailing  conditions 
where  mergers,  acquisitions  and  sup¬ 
plier  and  customer  collaboration  call 
for  interapplication  interoperability  in 
a  matter  of  days  instead  of  years,  as  cur¬ 
rently  dictated  by  ERP  initiatives. 

Why  then  is  the  adoption  of  Web  ser¬ 
vices  so  slow?  Organizations  can  shift  to 
Web  service-based  integration  only  after 
they  restructure  the  way  IT  is  managed 
and  shift  attention  from  computing  to 
communications.  They  must  also  accept 
a  move  away  from  ownership  of  the 
means  of  computing  and  be  willing  to 
purchase  most  of  their  transactions  as  a 
service.  I  will  write  more  about  such 
transformations  next  month.  I 
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Squandered  Opportunity 

Companies  invested  heavily  in  IT 
asset  management  tools  prior  to 
Y2k,  but  they  have  largely  failed  to 
make  long-term  improvements. 
Industry  experts  offer  tips  for 
picking  up  the  pieces.  Page  42 


Get  Over  Yourself 

The  pervasiveness  of  IT  may  be 
making  it  strategically  irrelevant, 
according  to  Harvard  Business 
Review  editor  Nicholas  G.  Carr, 
who  says,  “IT  management  should, 
frankly,  become  boring.”  Page  44 


What  You  Measure 
Is  What  You  Get 

Forget  descriptions  like  “world-class 
support.”  Contracts  must  include 
clearly  defined  metrics  if  supplier 
performance  is  to  be  measured  fairly, 
writes  columnist  Bart  Perkins.  Page  46 


Budget  overruns,  project  failures  and  linger¬ 
ing  resentment  over  the  millions  spent  on 
Y2k  are  to  blame  for  IT s  credibility  crisis. 

By  Gary  H.  Anthes  and  Thomas  Hoffman 


IT  WAS  BUDGET  time  at  Allied 
Building  Products  Corp.,  and  the 
CEO  wanted  to  know  how  the 
company  could  increase  sales  and 
profits  in  the  coming  year.  “How 
much  money  do  you  need?”  he 
asked  his  senior  managers.  “How 
many  people  do  you  need?” 

“I  said,  ‘Whatever  extra  dollars  you 
would  give  to  me,  give  to  Jamie,’  ”  re¬ 
calls  Brian  Reilly,  chief  financial  offi¬ 
cer  at  Allied.  “I  get  a  better  return  out 
of  money  spent  in  Jamie’s  world  than 
in  mine.” 

Jamie  Kutzer  is  CIO  at  the  East 
Htherford,  N.J.-based  company,  where 
the  CFO’s  extraordinary  generosity 
with  his  budget  is  testimony  to  the  ex¬ 


traordinary  reputation  of  IT  there. 

Sadly,  that  type  of  relationship  be¬ 
tween  IT  managers  and  business  man¬ 
agers  is  uncommon.  Budget  overruns 
and  return  on  investment  underruns 
have  plagued  IT  and  tarnished  its  rep¬ 
utation  for  decades.  IT’s  performance 
has  been  poor  in  completing  projects 
on  time  and  within  budget. 

And  it  has  grown  worse  during  the 
past  few  years,  according  to  research 
conducted  by  The  Hackett  Group  in 
Atlanta,  which  regularly  benchmarks 
the  performance  of  nearly  2,000  com¬ 
panies,  including  97%  of  the  Dow 
Jones  Industrial  companies  and  81%  of 
the  Fortune  100.  According  to  Hackett, 
average-performing  companies  report¬ 


ed  an  IT  project  completion  rate  of 
67%  in  2002,  down  from  72%  in  1999. 
The  decline  is  more  striking  for  the 
completion  of  one-year  IT  projects, 
which  dropped  from  58%  in  1999  to 
51%  in  2002. 

The  Y2k  nonevent,  the  dot-com 
bomb  and  disappointment  over  the 
cost  and  performance  of  complex  sys¬ 
tems  have  diminished  the  stature  of 
some  IT  shops.  Many  IT  leaders  ac¬ 
knowledge  that  there’s  a  credibility 
problem  in  IT.  At  Computerworld’ s 
Premier  100  IT  Leaders  conference  in 
February,  45%  of  135  survey  respon¬ 
dents  said  that  IT  had  an  image  prob¬ 
lem,  which  they  attributed  mostly  to 
IT  being  too  slow  and  too  expensive. 


IT  is  a  “joke”  in  many  boardrooms, 
says  Joe  Noga,  a  partner  at  Tatum  CFO 
Partners  LLP,  an  Atlanta-based  CFO 
placement  company.  “What  I  hear  is, 
‘Holy  Christmas,  they  told  me  it  was 
only  going  to  cost  1%  of  sales,  and  it’s 
4%.’  Or,  ‘They  told  me  this  thing  was 
going  to  be  installed  and  working  in  18 
months,  and  here  we  are  30  months 
into  it,  and  we  don’t  have  the  first  part 
working,’  ”  Noga  says.  And  the  expla¬ 
nations  from  IT  managers  often  aren’t 
helpful  or  particularly  clear,  he  says. 

Some  IT  executives  acknowledge 
that  IT  faces  cyclical  reputation  and 
credibility  problems.  For  example,  they 
point  to  the  massive  amount  of  money 
and  labor  thrown  at  the  year  2000 
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problem.  Total  U.S.  spending  on  Y2k 
from  1997  to  2000  was  $125.9  billion, 
Meta  Group  Inc.  estimates. 

Although  many  industry  experts  and 
CIOs  say  the  paucity  of  problems  that 
occurred  after  the  date  change  was  a 
result  of  the  effort  put  in  by  IT  depart¬ 
ments,  some  board-level  executives 
say  they  think  the  problem  was  hyped 
and,  thus,  overfunded. 

“I  believe  that  credibility  has  been 
damaged  and  is  being  justifiably  ques¬ 
tioned,”  says  Jerry  McElhatton,  presi¬ 
dent  of  global  technology  and  opera¬ 
tions  at  MasterCard  International  Inc. 
in  Purchase,  N.Y.  One  reason,  he  says, 
is  that  systems  are  much  more  com¬ 
plex  than  they  were  20  years  ago. 
“These  enterprise  systems  are  massive, 
and  they  require  significant  infrastruc¬ 
ture  changes,”  he  says.  “It’s  a  huge  un¬ 
dertaking,  and  people  just  miscalculate 
and  underestimate  what  it  takes  to  get 
these  [projects]  completed.” 

Many  companies  lack  the  capital  to 
invest  in  modernizing  IT,  and  IT  has  a 
history  of  not  delivering  ROI  on  such 
investments.  These  problems  “test  CIO 
credibility  in  some  companies,”  says 
Robert  A.  Kotch,  president  of  SIM  As¬ 
sociates  Inc.,  an  IT  consulting  firm  in 
Purdys,  N.Y.  Others  point  to  CIOs  who 
persuaded  management  to  spend  lav¬ 
ishly  during  the  dot-com  era  on  e-com¬ 
merce  initiatives  that  never  paid  off. 

Susan  Unger,  CIO  at  Daimler- 


If  you  believe  ITs  credibility 
has  decreased,  what  arc  you 
doing  to  turn  it  around? 


Getting  business  units 
more  involved  in  planning 
and  decision-making 

17.4% 

Improving  communications 
with  the  CEO  and  other 
business  unit  heads 

17.2% 

Better  prioritizing 
of  key  projects 

14.6% 

Evangelizing  the 
value  of  IT 

12.1% 

Putting  a  greater  focus 
on  short-term  ROI 

10.4% 

Establishing  customer 
liaison  teams 

9.3% 

Doing  more 
cost-cutting 

6% 

Changing  the  approach 
and/or  structure  of  the 

IT  organization 

1.6% 

SOURCE:  Survey  of  135  attendees  at  Computer- 
world s  Premier  100  IT  Leaders  conference  in  Febru¬ 
ary.  Multiple  responses  allowed;  431  total  responses. 


Chrysler  AG,  says  that  even  during  the 
height  of  the  e-commerce  boom,  the 
automaker  invested  only  in  IT  projects 
that  were  expected  to  deliver  sizable 
returns.  “We  didn’t  get  a  huge  increase 
in  our  IT  budget  then,  so  we  haven’t 
experienced  a  big  decrease  to  our  bud¬ 
get  recently,”  she  says. 

For  Unger,  credibility  depends  on 
how  CIOs  have  been  perceived  by  se¬ 
nior  management  and  what  they  have 
accomplished  during  their  tenure.  “If 
they  had  great  credibility  to  begin 
with,  they  should  be  all  right  today,” 
says  Unger.  “If  they  didn’t,  they  proba¬ 
bly  lost  it  well  before  the  dot-com  era.” 

Chivalry  Isn’t  Dead 

Allied  Building  Products’  IT  shop  wins 
credibility  among  business  unit  man¬ 
agers  with  a  can-do  spirit  tempered 
with  realism.  As  CFO  Reilly  says  of 
CIO  Kutzer:  “Jamie’s  attitude  is,  ‘You 
call  me,  and  I’ll  get  you  the  answer,’ 
rather  than  ‘I’ll  send  you  a  report,  and 
you  run  the  business  the  best  you  can.’ 
The  gentleman  before  him  promised 
too  much,  too  fast,  or  he  just  said, 
‘You’re  not  going  to  get  it.’  ” 

Not  overpromising  is  important, 
Kutzer  says.  “Just  last  week,  I  walked 
into  somebody’s  office  and  said,  ‘I’m 
here  to  manage  your  expectations,’  ”  he 
says.  Kutzer  explained  to  the  supply 
manager  why  the  distribution  software 
to  be  installed  at  a  branch  office  was 
likely  to  be  troublesome  for  the  first 
three  weeks.  By  doing  so,  Kutzer  says 
he  was  able  to  help  the  manager  set  his 
hopes  realistically. 

Throwing  cold  water  on  user  expec¬ 
tations  is  the  right  thing  to  do  some¬ 
times,  but  it  can’t  stop  there,  Reilly 
says.  “We’ll  go  to  Jamie  and  say,  ‘Here’s 
what  I’m  looking  for.  How  long  will  it 
take  you?’  And  he  says,  ‘How  about  if 
you  did  it  this  way  instead?’  He’s  sort 
of  re-engineering  the  question.”  Kutzer 
has  a  strong  background  in  business 
operations  and  distribution  that  helps 
his  credibility,  Reilly  says. 

But  not  everyone  believes  IT  has  a 
credibility  problem.  “I’ve  seen  a  notice¬ 
able  improvement  in  the  reputation  of 
IT  and  IT  leaders  in  the  past  few  years,” 
says  Linda  Roubinek,  an  information 
systems  officer  at  Nationwide  Mutual 
Insurance  Co.  in  Columbus,  Ohio  “IT 
has  become  more  of  a  core  competency 
in  business,  and  business  leaders  are 
starting  to  see  technology  as  an  enabler 
to  delivering  business  plans.” 

Roubinek  outlines  several  things  Na¬ 
tionwide  is  doing  to  make  IT  both  ef¬ 
fective  and  appreciated.  For  example, 
she  says,  the  CIO  introduced  a  “spon¬ 
sorship  model”  by  which  IT  and  busi- 


ALL  TOO  OFTEN,  a  company’s  top 
executive  sees  IT  only  as  a  tool. 

For  that  reason,  the  CIO  should  re¬ 
port  to  the  CEO,  says  Joe  Noga,  a 
partner  at  Tatum  CFO  Partners. 
“When  IT  grows  up  under  a  CFO,  it  is 
not  viewed  as  an  equal  partner,” 

Noga  says. 

Tim  Stanley,  CIO  at  Harrah's  Enter¬ 
tainment  Inc.  in  Las  Vegas,  reports  to 
the  chief  operating  officer. 

“I  have  reported  to  CFOs  in  the 
past,  and  I  don't  much  care  for  it,”  he 
says.  “CFOs  are  very  financially  savvy. 
But  being  directly  linked  to  the  chief 
operating  officer  puts  you  right  in  the 
thick  of  business  needs,  desires  and 
impacts.  It’s  less  of  a  cost  equation 
and  more  of  a  business-value  driver 
equation.” 

Of  course,  it  doesn’t  hurt  for  IT  to 
hit  a  grand  slam,  Stanley  adds.  The 
casino  company’s  Total  Rewards  loy¬ 
alty  program  is  “a  key  driver  of  our  17 
consecutive  quarters  of  same-store 
sales  growth,”  he  says.  The  program 
and  everything  under  it  -  such  as 
modeling  to  predict  customer  behav¬ 
ior  -  is  all  IT-driven  and  for  the  past 
five  years  has  produced  better  than 
60%  ROI,  he  says. 

Despite  periodic  setbacks,  there  is 
some  evidence  IT  may  be  increasing 
in  stature.  The  Hackett  Group  last  year 


NOTE:  PERCENTAGES  MAY  NOT  ADD  UP  TO  100  DUE  TO  ROUNDING 

ness  units  are  joined  at  the  hip  before  a 
project  starts.  “Funding  is  agreed  upon 
between  the  systems  and  business 
partners,  and  they  go  together  to  our 
corporate  leadership  for  the  money,” 
she  says.  “They  collaboratively  work 
out  what  the  ROI  is  and  the  goals  of 
the  project  before  requesting  funding.” 

Every  six  months,  Roubinek  says,  the 
IT  and  business  partners  take  a  fresh 
look  at  each  project,  recompute  the  ex¬ 
pected  ROI  and  request  funding  for  the 


:  published  a  survey  showing  that  the 

•  percentage  of  companies  with  CIOs 

:  increased  from  65%  in  1999  to  82% 

:  in  2002.  In  2003,  more  than  a  third  of 

•  CIOs  will  report  to  CEOs  (see  chart). 

•  Dennis  Callahan,  CIO  at  The 

:  Guardian  Life  Insurance  Company  of 
i  America  in  New  York,  reports  to  the 

•  CEO,  and  that  arrangement  lets  him 

\  be  seen  as  a  business  leader,  not  just 
:  as  someone  who  keeps  the  e-mail 
:  server  up,  he  says. 

•  “One  of  the  highest  compliments 
\  paid  to  me  by  our  CEO  is  that  he 

:  doesn’t  think  of  me  as  a  technical 
:  guy;  he  thinks  of  me  as  a  real  busi- 

•  nessman  who  happens  to  know  a  lot 

•  about  technology,”  he  says. 

:  Callahan,  who  joined  Guardian  in 

•  2000,  says  the  previous  IT  regime 

•  had  “undershot  expectations  and 

:  overshot  costs,  and  that  led  to  a  level 
:  of  dissatisfaction  with  IT.”  To  turn  that 

•  around,  Callahan  says  he  pushed  IT 

■  into  a  “rapid  response,  client-service 
:  orientation,  starting  with  me,  down.” 

i  He  recalls  the  result:  “The  word  got 

•  out  -  we  are  doing  something  new, 

•  we  are  moving  fast,  we  are  service- 

:  oriented,  and  the  business  heads  and 
i  I  partner  top-down.  The  typical  reac- 

■  tion  from  them  was,  ‘Oh,  I  wish  you 
\  were  here  five  years  ago.'  ” 

:  -  Gary  H.  Anthes 


next  six  months.  Risk  mitigation  plans 
are  updated  at  that  time.  Any  project 
heading  south  could  get  killed  at  one 
of  these  reviews.  “We  have  developed 
the  managerial  courage  to  stop  a  proj¬ 
ect  when  we  feel  it’s  not  meeting  our 
original  expectations,”  she  says. 

Corporate  Systems  Vice  President 
Damien  Bean’s  strategy  for  success  at 
Hilton  Hotels  Corp.  in  Beverly  Hills, 
Calif.,  can  be  summed  up  in  one  word: 

Continued  on  page  40 
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companies  and  81%  of  the  Fortune  100  companies. 


•VHP  '  •o.'^V''*0'':rv..rr  •  : 

■;  ■  •> 

'  •.«*«■  w  v.:X' .  t-  '  ,v-t-  > 


%MfW: 


RESERVED 

FOR 

JACK 

WHO  SAVED 
THE 

COMPANY 
$500,000 
A  YEAR  BY 
ELIMINATING 
OVERNIGHT 
DELIVERY 


Ianyware’  The  downside:  your  walk  through  the  parking  lot  was  long.  The  upside:  it  gave  you  time 
to  think  about  a  way  to  eliminate  the  high  cost  and  hassles  of  overnight  delivery. 

And  lo  and  behold,  you  found  it:  Canon  imageRUNNER®  technology.  It  lets  you  send  documents  anywhere,  in  any  form,  at  any  time, 
over  your  network  or  the  Internet.  Instantaneously.  Just  scan  a  document  into  the  imageRUNNER  and  send  it -to  desktops,  E-mail 
addresses,  fax  machines,  databases  and  file  servers.  All  of  which  results  in  lowered  costs  and  increased  productivity.  So,  take  pride. 
Thanks  to  Canon  know-how,  your  walk  through  the  parking  lot  is  considerably  shorter.  1 -866-25-CANON  www.imagerunner.com 

Canon  h  a  registered  trademark  and  Canon  know  How  is  a  trademark  of  Canon  Inc.  IMAGERUNNER  is  a  registered  trademark  of  Canon  Inc.  in  the  U.S.  and  Canada.  !MAGnANYW-\RE  is  a  service  mark  of  Canon  U.S.A..  Inc.  C2U03  Canon  U.S.A..  Inc. 


Canon 


KNOW  HOW  “ 


Mill . .  ■.  .  *  • -  'V  r- 


4G  COMPUTERWORLD  May  12, 2003 


MANAGEMENT 


www.computerworld.com 


Continued  from  page  38 
discipline.  “We  run  IT  like  a  business,” 
he  says.  “The  entire  IT  budget  —  every 
last  cent  —  is  funded  out  of  the  business 
side,  and  we  charge  back.  We  absolutely 
hit  our  budgets.  We  are  very  disciplined, 
and  we  deliver  what  we  promise.” 

Bean  puts  the  issue  of  IT’s  reputation 
into  perspective:  “I  don’t  think  IT  ex¬ 
ecutives  are  suffering  a  credibility  gap 
more  than  any  other  senior  function.” 
He  says  if  IT  deserves  a  hit  for  its  role 
in  the  excesses  of  the  late  1990s,  finan¬ 
cial  executives  deserve  it  even  more. 

One  way  to  elevate  the  stature  of  IT 
inside  a  company  may  be  to  outsource 
the  commodity  functions  and  retain 
the  strategic  ones.  Owens  &  Minor 
Inc.,  a  Richmond,  Va.-based  medical 
supplies  distributor,  has  outsourced 
day-to-day  IT  development  and  opera¬ 
tions  to  Perot  Systems  Corp.  What  re¬ 
mains  is  a  small  CIO  office.  Populated 


by  a  dozen  people  who  act  as  links 
with  the  business  units,  the  office 
“steers  IT  in  the  direction  we  need  to 
go,”  says  Don  Stoller,  director  of  infor¬ 
mation  management.  Stoller  says  Perot 
Systems  gives  him  more  flexibility  to 
get  the  right  skills  for  projects.  “I  don’t 
know  if  we  could  have  maintained  the 
credibility,  and  the  delivery  of  projects, 
without  outsourcing,”  he  says. 

So  while  IT  remains  in  the  doghouse 
at  many  companies,  IT  managers  else¬ 
where  have  employed  a  variety  of 
strategies  to  win  respect.  The  most 
successful  ones  say  there  is  just  no 
substitute  for  quality  work  delivered 
on  time  and  on  budget.  I 
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See  how  IT  leaders  responded  to  ComputerworlcT s 
February  credibility  survey: 

O  QuickLink  38075 

www.computerworld.com 


First-Class  Upgrade 


PAUL  A.  STRASSMANN,  an  IT  manage¬ 
ment  consultant  and  Computerworld colum¬ 
nist  who  has  served  as  the  CIO  at  several 
large  companies  and  federal  agencies,  says 
there  are  three  kinds  of  CIOs,  and  if  you 
want  to  be  well  respected,  you  should  strive 
for  the  top  category. 

The  “technology  CIO”  is  on  the 
lowest  rung  of  the  ladder  and  con¬ 
trols  3%  or  less  of  the  company’s 
total  budget  -  basically  direct 
spending  for  IT  people  and  gear, 
he  says.  Next  comes  the  “informa¬ 
tion  resources  CIO,”  who  controls 
not  only  technology  spending  but 
also  spending  on  information  re¬ 


sources  generally,  perhaps  30%  of  the  bud¬ 
get.  At  the  top  sits  the  “information  strategy 
CIO,"  who  ultimately  has  some  influence 
over  100%  of  the  budget. 

“When  you  are  a  technology  CIO  every¬ 
body  hates  you,  because  when  the  e-mail 
goes  down,  it’s  your  fault,”  Strassmann  ex¬ 
plains.  “If  you  want  to  be  appreci¬ 
ated,  you  have  to  get  an  upgrade.” 

To  move  ahead,  Strassmann 
offers  this  advice:  “Pull  up  your 
socks  and  get  going.  Stop  grous¬ 
ing  and  make  a  contribution.  My 
grandfather  told  me  that  -  you  ei¬ 
ther  pull  up  your  socks  or  you  die.” 

-  Gary  H.  Anthes 


SIN6IN6  YOUR  OWN  PRAISES 


SUFFERING  FROM  A  TARNISHED  reputa¬ 
tion  in  IT?  You  may  want  to  step  up  your  sales 
efforts  with  a  marketing  program  that  helps 
reinforce  the  value  that  IT  delivers. 

IT  executives  at  companies  that  have  en¬ 
acted  such  programs  -  including  The  M0NY 
Group  Inc.,  CBS  and  Baxter  International  Inc. 
-  point  to  real  benefits  like  financial  gains  and 
image  makeovers. 

Two  years  ago,  M0NY  restructured  itself  by 
creating  separate  and  dedicated  IT  groups,  IT 
budgets  and  IT  relationship  manager  posi¬ 
tions  to  support  each  of  its  business  units. 
That's  when  the  IT  department’s  marketing 
efforts  began  in  earnest,  says  E.P.  Rogers,  se¬ 
nior  vice  president  and  CIO  at  the  New  York- 
based  company. 

The  reason:  MONY’s  newly  organized  busi¬ 
ness  units  were  also  given  the  OK  to  go 
around  corporate  IT  and  collect  bids  for  tech¬ 
nology  projects  from  third-party  vendors.  If 
the  best  price  and  skills  came  from  the  corpo¬ 
rate  IT  group,  so  much  the  better.  If  not,  busi¬ 
ness  units  were  free  to  hire  from  outside. 

“We  were  always  focused  on  our  cus¬ 
tomers,  and  we'd  always  gotten  high  marks” 
from  end  users  on  an  annual  IT  report  card, 
Rogers  says.  “But  when  the  [outside  services 
rule]  came  down  two  years  ago,  we  had  to 
market.  If  we  didn’t  have  the  right  approach  or 
culture  established,  we'd  lose  customers  and 
have  to  let  go  of  people.” 

Since  then,  MONY’s  IT  group  has  taken 
steps  to  validate  and  better  communicate  its 
value  to  users.  These  steps  include  bench¬ 
marking  the  costs  of  developing  applications, 


running  its  data  centers  and  other  IT  support 
functions  against  external  competitors  such 
as  IBM,  says  Rogers. 

The  IT  group  has  also  published  a  products 
and  services  brochure  for  business  units  to 
evaluate  the  costs  and  breadth  of  the  IT 
group’s  offerings,  including  hourly  Web  ser¬ 
vices  programmer  rates  and  data  center  sup¬ 
port  costs. 

MONY’s  IT  group  has  been  in  head-to- 
head  competition  with  outside  providers  for  IT 
projects  five  times  and  hasn’t  lost  one  yet. 

This  includes  a  recent  request  for  propos¬ 
als  by  the  company’s  annuities  division  to  in¬ 
stall  a  new  administration  system  from 
Malvern,  Pa.-based  AdminServer  Inc.  One 
third-party  services  firm  “aggressively"  pur¬ 
sued  the  deal,  but  MONY's  IT  group  demon¬ 
strated  that  it  could  install  the  system  for 


PRO!  IT 

■  Compare  the  costs  of  in-house  IT 
support  and  services  with  the  costs 
of  outsourcing  those  functions. 

■  Market  IT  to  business  units  with  a 
printed  brochure  detailing  IT's  of¬ 
ferings  and  pricing. 

■  Partner  with  the  units  and  take 
responsibility  to  reduce  costs. 

Make  an  IT  support  plan  with  them. 

■  Conduct  a  skills  assessment  to 
determine  how  the  IT  staff  can  best 
meet  the  business  needs. 


$1  million  less  than  the  competitor’s  asking 
price,  says  Rogers. 

The  internal  IT  group  was  able  to  meet  sys¬ 
tems  integration  and  design  needs  in  a  “much 
more  cost-effective”  approach  than  other 
companies  that  bid  on  the  project,  says  Carol 
Sullivan,  vice  president  and  CFO  of  MONY’s 
annuities  division.  The  implementation  began 
in  March  and  is  expected  to  continue  through¬ 
out  2003,  she  says. 

Before  the  restructuring,  IT  “was  one  cost 
center  within  a  corporate  entity,"  says  Sulli¬ 
van.  Now,  she  says,  the  IT  department  is 
viewed  as  a  partner,  and  both  parties  have  a 
stake  in  reducing  IT  costs,  such  as  CPU  use 
and  storage  requirements.  “It’s  relevant  now 
that  we’re  paying  the  bills,”  Sullivan  adds. 

Late  last  year,  CBS,  a  division  of  Viacom 
International  Inc.,  launched  an  IT  transforma¬ 
tion  program  that  includes  an  IT  marketing 
and  communications  practice.  The  marketing 
piece  is  aimed  at  helping  the  IT  department 
better  align  itself  with  the  business  units  it 
supports,  including  the  CBS  television  net¬ 
work,  30  Viacom  TV  stations  across  the  U.S., 
183  radio  stations  run  by  Infinity  Broadcasting 
Corp.,  and  Viacom  Outdoors,  a  billboard  and 
transit  advertising  service. 

“The  business  had  changed  quite  a  bit  over 
the  years  and  [the  IT  organization]  hadn’t," 
says  Juiie  Kapsch,  vice  president  of  strategic 
services  for  CBS  IT  in  New  York.  “We  trans¬ 
formed  ourselves  in  order  to  be  better  aligned 
with  the  business  and  to  help  us  execute 
against  an  aggressive  [business]  agenda." 

Kapsch  says  managers  from  CBS  IT  met 
regularly  with  business  unit  leaders  during  the 
yearlong  project  to  discuss  the  types  of  prod¬ 
ucts  and  services  they  were  receiving  and  the 
strategic  direction  for  each  business  unit  be¬ 


fore  developing  a  support  plan  for  each  group. 

Then,  the  IT  group  did  a  skills  assessment 
of  each  of  its  175  staffers  and  evaluated  all  of 
its  processes  -  from  planning  to  project  exe¬ 
cution  and  support  -  to  come  up  with  an  op¬ 
erating  model  to  meet  the  needs  of  the  busi¬ 
ness.  “We  didn’t  want  to  eliminate  any  head 
count,  but  we  did  want  to  better  utilize  our  re¬ 
sources,"  Kapsch  says. 

One  of  the  biggest  challenges  for  CBS  IT 
since  the  reorganization  has  been  trying  to 
apply  best  practices  to  its  own  environment. 
“Even  before  the  reorganization,  we've  been 
trying  to  run  IT  more  like  a  business  and  com¬ 
municate  our  successes  in  business  terms, 
such  as  risk  management  and  yield  manage¬ 
ment,"  says  Kapsch. 

Even  companies  without  formal  IT  public 
relations  functions  can  take  steps  to  burnish 
the  image  of  IT.  For  example.  MasterCard  In¬ 
ternational  annually  surveys  its  external  cus¬ 
tomers  (member  banks).  It  also  surveys  inter¬ 
nal  users  after  every  project. 

“We  ask  them  did  our  people  understand 
their  requests,  did  they  perform  on  schedule, 
did  they  perform  on  budget  and  so  on,”  says 
Jerry  McElhatton,  president  of  global  technol¬ 
ogy  and  operations  at  MasterCard.  The  com¬ 
pany’s  IT  satisfaction  rating  is  98%  overall, 
he  says.  Its  “top-box  rating,”  the  percentage 
of  users  who  give  IT  the  very  highest  mark,  is 
75%,  he  adds. 

-  Thomas  Hoffman  and  Gary  H.  Anthes 

INTERNAL  MARKETING 

The  do’s  and  don'ts  of  marketing  IT  in-house: 

QuickLink  31261 


Survey  shows  the  scarcity  of  internal  IT  marketing: 

QuickLink  36527 
www.computerworld.com 


WebSphere  software 


See  old  apps  combine  with  new  apps. 
See  customers  connect  with  partners! 
See  today’s  stuff  click  with  tomorrow’s 


WebSphere  Business  Integration  is  far  and  away  the  leading  integration  software  for  the  on  demant 
era.  Open  and  flexible,  WebSphere  lets  you  model,  integrate  and  manage  all  of  your  business 
processes.  WebSphere  delivers  an  infrastructure  that  quickly  responds  to  change,  meeting  busine 

and  case  studies,  visit  ibm.com/websphere/seeit 


demands,  on  demand.  For  an  Integration  InfoKiJ 


or  trademarks  o!  International  Business  Machines  Corporation  in  the  United  States  and/or  other 
SrGreen  Study  Application  Integration  Executive  Summary  2003  2003  WintorGreen  Research,  Inc 


IBM.  WebSphere,  the  e-business  logo  and  e-business  on  demand  are  registered  tradema 
countries.  Certain  information  contained  within  this  advertisement  is  based  on  results  ol  thp  w 
2003  IBM  Corporation  All  rights  reserved. 
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Squandered 

Opportunity 

Companies  invested  heavily  in  IT  asset 
management  tools  prior  to  Y2k  but  have  largely 
failed  to  make  long-term  improvements. 

By  Thomas  Hoffman 


F plash  back  to  the  late  1990s. 
Companies  were  spending 
billions  of  dollars  to  prepare 
computer  systems  for  the  Y2k 
date  rollover.  One  of  the  key 
IT  investments  many  of  them 
made  was  in  asset-tracking  tools  that 
could  help  them  identify  all  of  their 
hardware  and  software  and 
determine  which  systems 
required  modifications. 

At  the  time,  pundits  and 
IT  managers  widely  be¬ 
lieved  that  the  money  and 
labor  being  pumped  into 
Y2k  would  lead  to  more  mature  asset 
management  practices  beyond  Jan.  1, 
2000  (see  “Y2k’s  Fallout  of  Good  For¬ 
tune,”  QuickLink  a3140).  But  that  sce¬ 
nario  didn’t  play  out,  at  least  not  on 
any  grand  scale,  according  to  IT  indus¬ 
try  executives,  managers  and  analysts 
who  track  the  asset  management  mar¬ 
ket  closely. 

“Companies  squandered  a  lot  of  op¬ 
portunities”  by  failing  to  make  addi¬ 


tional  investments  in  their  asset  man¬ 
agement  tools  and  processes,  says 
Frances  O’Brien,  an  analyst  at  Gartner 
Inc.  in  Stamford,  Conn. 

Generally  speaking,  companies  in¬ 
vested  a  lot  of  money  and  effort  to  get 
a  more  detailed  view  of  the  hardware 
and  software  in  their  IT  portfolios, 
says  O’Brien.  “But  they 
didn’t  take  asset  manage¬ 
ment  further,”  such  as  using 
it  to  better  manage  IT  con¬ 
tracts  or  to  measure  the  in¬ 
terrelationships  among  sys¬ 
tems  more  effectively,  she 
adds  (see  story  at  right). 

That’s  true  in  part  because  many 
companies  were  focused  on  attacking 
the  Y2k  problem  as  cheaply  and  effi¬ 
ciently  as  possible  and  paid  scant  at¬ 
tention  to  refining  their  asset  manage¬ 
ment  processes,  says  Phil  Davis,  a  vice 
president  at  Layton  Technology  Inc., 
a  Tampa,  Fla.-based  firm  that  provided 
IT  auditing  services  to  companies 
in  the  late  1990s  and  now  sells  a  PC 


auditing  tool  called  Audit  Wizard. 

Consultant  Pat  Cicala  estimates  that 
more  than  half  of  all  corporate  asset 
management  programs  in  the  U.S.  have 
done  little  more  than  gather  dust  since 
Jan.  1,  2000.  Cicala,  president  and  CEO 
of  Cicala  &  Associates  LLC  in  Hobo¬ 
ken,  N.J.,  says  most  companies  have 
failed  to  follow  up  their  Y2k  inventory 
efforts  with  the  creation  of  databases 
to  track  hardware  and  software  licens¬ 
es  and  other  contract  details  on  an  on¬ 
going  basis. 

Indeed,  during  Y2k  preparations, 
many  companies  focused  on  tracking 
their  existing  hardware  and  software 
systems  but  paid  little  attention  to 
managing  them,  says  Kevin  Roche, 
general  manager  of  Getronics  North 
America,  a  Billerica,  Mass.-based  di¬ 
vision  of  Getronics  NV,  an  Amster¬ 
dam-based  IT  consulting  company. 
The  minority  of  companies  that  have 
continued  to  develop  their  asset 
management  practices  are  using 
tools,  people  and  processes  to  track 
hardware  and  software  licenses, 

IT  support  costs  and  system  utiliza¬ 
tion  and  to  determine  when  an  IT  as¬ 
set  “has  reached  the  end  of  its  life,” 
says  Roche. 

Post-Y2k  Priorities 

Y2k  also  had  a  whiplash  effect  on  as¬ 
set  management  practices.  Heavy 
spending  on  Y2k-readiness  led  many 
firms  to  postpone  e-business,  re¬ 
source  management  and  other  IT  proj¬ 
ects.  Once  that  pent-up  demand  was 
unleashed  at  the  turn  of  the  century, 
investments  and  enhancements  to  as¬ 
set  management  initiatives  were 
pushed  to  the  back  burner  at  many 
companies,  says  John  Hillmer,  direc¬ 
tor  of  technology  services  at  North¬ 
western  Mutual  Life  Insurance  Co.  in 
Milwaukee. 

Now,  with  a  weak  economy,  IT  bud¬ 
gets  have  been  slashed  and  IT  depart¬ 
ments  have  been  struggling  to  reduce 
costs  wherever  possible.  Asset  man¬ 
agement  has  been  among  the  projects 
to  take  a  hit  or  be  pushed  to  the  back 
of  the  line.  “Those  organizations  that 
are  good  at  asset  management  are  in 
the  catbird  seat,”  says  O’Brien.  “They 
can  see  how  their  IT  investments  are 
performing,  and  they  have  an  easier 
time  of  obtaining  funding”  for  new 
projects. 

“It’s  a  chicken-and-egg  thing,”  says 
Cicala.  If  companies  had  funded  and 
executed  their  asset  management  pro¬ 
grams  effectively  over  the  past  few 
years,  “they  would  have  generated  the 
cost  savings  to  pay  for  10  other  proj¬ 
ects,”  she  says,  i 


Picking  Up  the  Pieces 

Most  companies  have  generally  underinvested  in  asset  management 
since  Y2k.  Still,  there  are  steps  IT  managers  can  take  to  improve. 

Industry  experts  offer  the  following  advice: 

■  If  your  company  has  an  asset  management  tool  in  place,  see  if  the  license  is 
up  to  date  and  determine  whether  it’s  capable  of  supporting  your  current  needs. 

■  If  funding  is  a  problem,  start  by  tackling  one  area  that  can  quickly  deliver 
identifiable  returns,  such  as  auditing  vendor  invoices  -  even  if  they  have  to  be 
counted  manually. 

■  Get  the  CFO  involved.  CFOs  understand  and  appreciate  the  importance  of 
tracking  and  managing  assets  effectively. 

■  Don't  look  at  asset  management  tools  as  a  silver  bullet,  which  is  a  mistake 
many  companies  make.  People,  processes  and  tools  have  to  be  integrated  to 
make  asset  management  programs  succeed. 


COUNTING  COSTS 

See  some  of  the  expenses  of 
launching  an  asset  program: 

O  QuickLink  38001 
www.computerworld.com 


Beyond  Covering 
Your  Assets 

IT  departments  that  have  managed  to 
stay  current  with  their  asset  management 
programs  since  Y2k  are  now  focusing 
on  configuration  management  and  on 
making  sure  that  they’re  meeting  more 
stringent  software-license  compliance 
guidelines. 

“We’re  trying  to  take  asset  manage¬ 
ment  to  the  next  level,  beyond  tracking 
and  inventorying  the  costs  and  service- 
level  agreements  for  individual  assets,” 
says  John  Hillmer,  director  of  technology 
services  at  Northwestern  Mutual  Life  In¬ 
surance.  Hillmer  and  his  IT  group  are  us¬ 
ing  asset  management  tools  and  tech¬ 
niques  to  determine  how  a  new  applica¬ 
tion  will  interface  with  other  software  sys¬ 
tems  the  company  uses  “and  the  impact  it 
can  have  on  other  technologies  that  are 
closely  integrated,”  he  says. 

Meanwhile,  Microsoft  Corp.  and  indus¬ 
try  organizations  such  as  the  Business 
Software  Alliance  “are  coming  down 
hard”  on  software  license  compliance  - 
a  trend  that’s  helping  to  drive  a  resur¬ 
gence  in  asset  management  practices, 
says  Phil  Davis,  a  vice  president  at  Layton 
Technology. 

“The  big  guys,”  like  Microsoft  and  Ora¬ 
cle  Corp.,  are  conducting  software  audits 
with  customers  more  frequently,  “and  you 
have  to  show  what  you  have  in  place,” 
says  Werner  Knoblich,  vice  president  of 
customer  solutions  at  MR0  Software  in 
McLean,  Va. 

The  Mason  City  School  District  in  Ohio 
is  using  a  systems  management  package 
called  LANDesk  from  Clearwater,  Fla.- 
based  Enterprise  Management  Solutions 
Inc.  to  help  roll  out  new  software  to  its 
2,200  Dell  PCs  and  monitor  all  of  its  soft¬ 
ware  licenses  from  a  central  location. 

LANDesk,  which  costs  Mason  City 
about  $13,000  annually  in  licenses,  has 
helped  the  school  district’s  IT  department 
transition  from  supporting  250  end  users 
with  one  technician  to  supporting  500 
users,  says  Dave  Hickey,  the  group's  CIO. 

Other  companies  are  using  asset  man¬ 
agement  to  cut  costs.  For  instance,  Mike 
Emmerling,  a  senior  product  manager  at 
Getronics,  points  to  a  pharmaceuticals 
company  that  was  having  trouble  return¬ 
ing  leased  equipment  on  time.  Its  use  of 
asset  management  tools  and  processes 
saved  $150,000  in  lease  cost  overruns, 
he  says. 

-  Thomas  Hoffman 
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Tivoli  software 


See  it  fixed  before  it’s  broken. 

S  se  the  problem  before  it  occurs. 
See  IT  and  business  goals  as  one 


Tivoli  Intelligent  Management  software.  It’s  here  now:  software  that  self-configures,  self-heals, 
self-optimizes  and  self-protects.  On  demand.  With  Tivoli,  on  demand  business  is  more  manageable 
than  ever.  You’ll  spend  less  time  worrying  about  mundane  tasks  and  more  time  on  important  things  — 
like  business  results.  For  a  customized  analysis  of  how  Tivoli  can  help  you,  visit  ibm.com/tivoli/seeit 


IBM  TivC"  the  e-business  iogo  and  e-business  on  demand  ate  registered  trademarks  or  trademarks  ot  International  Business  Machines  Corporation  in  the  United  States  andior  other  countries 
:t  Dll  A  r.  r-l  /ed. 
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Information  technology  has  become  a 
commodity.  All  that’s  left  to  do  is  miti¬ 
gate  risks  and  control  costs.  So  states 
NICHOLAS  6.  CARR  in  this  month’s  Har¬ 
vard  Business  Review.  Carr  argues  that 
IT,  like  railroads,  electricity  and  other 
infrastructural  revolutions  that  came 
before,  has  become  so  pervasive  that 
companies  can’t  live  without  it  but  that 
it  now  offers  them  little  strategic  advan¬ 
tage.  Carr,  HBR’s  editor  at  large,  told 
Kathleen  Melymuka  why  he  thinks 
“IT  management  should,  frankly,  be¬ 
come  boring.” 

Why  is  the  strategic  value  of  IT  diminishing? 

For  any  resource  to  have  strategic  val¬ 
ue,  it  has  to  allow  companies  to 
use  it  in  a  distinctive  way.  As  in¬ 
formation  technology  becomes 
more  powerful  and  ubiquitous,  it 
is  increasingly  a  shared  resource 
that  everyone  has  access  to.  As 
a  result,  it’s  getting  harder  and 
harder  to  use  IT  to  gain  any 
kind  of  edge  over  competitors. 

Does  this  apply  to  all  kinds  of  IT,  or 
just  to  infrastructure?  I’m  defining  IT  as 
the  processing,  storage  and  transmis¬ 
sion  of  data,  so  I’m  talking  quite  broad¬ 
ly.  All  of  that  is  actually  becoming  part 
of  the  general  business  infrastructure, 
just  as  the  rail  system  became  part  of 
the  infrastructure  in  the  1800s  and  the 
electric  power  grid  became  part  of  the 
infrastructure  in  the  early  1900s. 

Are  you  saying,  for  example,  that  businesses 
have  already  derived  most  of  the  value  they 
can  get  from  the  Internet?  Most  of  the 
strategic  value.  Companies  are  going 
to  continue  to  use  the  Internet  to  in¬ 
crease  productivity,  but  that’s  going 
to  happen  at  the  industry  level,  not  at 
the  level  of  individual  companies.  As 


a  means  of  differentiation,  I  think 
we’re  already  past  the  peak  and  on 
the  downside. 

What  are  the  characteristics  of  IT  that  guar¬ 
antee  this  rapid  commoditization  you  write 
about?  First,  IT  is  essentially  a  trans¬ 
port  mechanism.  It  carries  digital  in¬ 
formation  in  the  same  way  power  grids 
carry  electricity.  That’s  much  more 
valuable  when  it’s  shared  than  when 
it’s  used  in  isolation,  so  everyone 
quickly  moves  to  shared  systems.  Sec¬ 
ond,  the  almost  infinite  scalability  of 
many  IT  functions,  combined  with  the 
rush  to  technical  standardization, 

>  means  there’s  no  economic  benefit  to 
having  proprietary  applications. 

No  one  writes  their  own 
e-mail  or  word-processing  ap¬ 
plications,  and  that  approach  is 
quickly  moving  to  supply  chain 
management  and  CRM.  Generic 
systems  are  efficient  but  don’t 
offer  advantages  over  competi¬ 
tors  because  we’re  all  moving  to 
the  same  systems.  With  the  ar¬ 
rival  of  the  Internet,  we’ve  got 
the  perfect  delivery  channel  for  gener¬ 
ic  applications.  As  we  move  to  Web 
services,  where  we  can  purchase  key 
applications  just  like  we  buy  electrici¬ 
ty,  that  will  push  us  further  toward  the 
homogenization  of  IT  capability. 

Isn’t  it  possible  that  there  will  be  another 
“big  thing”  in  IT  that’s  still  unforeseen? 

That’s  possible,  but  we’re  already  start¬ 
ing  to  see  that  the  capabilities  of  the 
IT  infrastructure  are  greater  than  the 
needs  that  businesses  have.  It’s  always 
possible  something  out  of  the  blue  will 
change  everything,  but  it’s  hard  to 
imagine  that  happening  the  way  you 
could  five  or  10  years  ago.  Also,  even 
if  something  like  that  happens,  it  will 


Changing  Outlook 

“The  risks 

are  beginning  to  weigh  much  more 
heavily  than  possible  benefits,  so 
companies  need  a  more  defensive 
and  less  offensive  posture  rd 
IT  investments.” 

“An  imperaive for 
IT  management  s  to  go  slowly  -  to 
follow  rather  than  lead.” 

“We’re  already 

past  the  peak  and  on  the  downside,” 


probably  come  out  of  the  vendor  com¬ 
munity,  not  the  user  community.  All 
companies  will  be  able  to  buy  the  ca¬ 
pability,  so  no  company  will  get  an 
advantage. 

What  do  the  previous  infrastructure  build¬ 
outs  -  like  railroads  and  electricity  -  tell  us 
about  the  ratio  of  risks  to  advantages  in  the 
current  state  of  IT?  In  the  early  stages  of 
the  build-out,  companies  can  get  pro¬ 
prietary  advantages  because  access  re¬ 
mains  limited  due  to  physical  limita¬ 
tions  or  patents  or  high  cost.  So  com¬ 
panies  begin  to  see  them  as  ways  to 
build  advantage.  But  the  build-out  hap¬ 
pens  so  fast  that  the  window  to  gain 
advantage  is  open  only  for  a  short 
time.  Then  the  technology  becomes  a 
cost  of  doing  business  that  all  pay,  and 
nobody  gets  advantage. 

When  things  begin  to  tip  that  way, 
the  risk  involved  in  using  that  technol¬ 
ogy  starts  to  outweigh  the  advantage. 
For  example,  nobody  gets  strategic  ad¬ 
vantage  from  electricity,  but  if  you  lose 
access,  that  can  devastate  your  busi¬ 
ness.  We’re  seeing  the  same  thing  with 


IT.  The  risks  are  beginning  to  weigh 
much  more  heavily  than  possible  bene¬ 
fits,  so  companies  need  a  more  defen¬ 
sive  and  less  offensive  posture  toward 
IT  investments. 

Are  you  saying  companies  should  be  more 
concerned  with  IT  risk  mitigation  than  with 
IT  strategy?  Exactly.  I  think  IT  security 
should  be  a  much  greater  concern  than 
it  has  been.  I  think  the  real  competitive 
struggle  in  the  use  and  management  of 
IT  is  over  cost.  It’s  hard  to  use  IT  to 
gain  a  strategic  advantage,  but  if  you 
use  it  poorly,  you  can  quickly  put  your¬ 
self  at  a  cost  disadvantage. 

You  talk  about  overspending  as  the  biggest 
risk  of  all,  but  every  IT  leader  I  talk  to  bleeds 
R0I.  If  an  IT  project  pays  for  itself  and  more, 
isn’t  that  enough?  I  think  the  focus  on 
ROI  is  exactly  right.  But  it’s  important 
to  make  sure  when  you  look  at  ROI 
that  you’re  not  assuming  some  com¬ 
petitive  advantage  that  heightens  pay¬ 
back.  You  have  to  really  look  at  payoff 
in  cost  savings  and  operational  effi¬ 
ciency.  I  think  there’s  still  a  danger  of 
managers  getting  excited  about  the  po¬ 
tential  for  advantage  and  moving  too 
quickly  into  new  technology. 

if  it's  getting  harder  to  realize  the  benefits  of 
IT,  why  is  the  cutting  edge  not  the  place  to 

be?  IT  costs  plummet  extremely  quick¬ 
ly.  Companies  should  ask  not  only 
whether  this  investment  is  justified 
based  on  ROI  calculations  today,  but 
whether  payoff  will  be  even  greater  if 
they  wait  six  months  or  a  year.  An  im¬ 
perative  for  IT  management  is  to  go 
slowly  —  to  follow  rather  than  lead. 

Should  IT  managers  be  looking  for  new 
careers?  It  depends  on  what  kind  of  IT 
managers  they  are.  Companies  have 
increasingly  bought  into  the  assump¬ 
tion  that  IT  is  a  strategic  resource.  As 
a  result,  they  have  brought  in  CIOs 
who  are  conceptual,  strategic  thinkers 
about  IT.  I  think  there’s  less  of  a  need 
for  those  types  of  individuals. 

But  because  expenditures  will  re¬ 
main  so  high,  there’s  enormous  need 
for  technically  astute,  hard-nosed  busi¬ 
ness  people  who  can  really  help  com¬ 
panies  to  get  the  most  out  of  IT  spend¬ 
ing.  I  think  IT  management  will  get 
less  sexy  but  remain  just  as  essential  in 
another  way.  I 
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The  pervasiveness  of  IT  may  be  making  it  strategically  irrelevant. 
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software 


See  wl  o’s  online  in  real-time. 

See  knowledge  shared  in  real-time, 
See  real-time  teamwork  at  work. 


Lotus  Instant  Messaging  is  the  leader  in  instant  messaging  for  business.  Lotus  software  lets  you  know 
who's  available,  on  demand.  It  creates  real-time,  virtual  collaboration,  on  demand.  It  can  create  cost 
savings  and  quicker  response  time  instantly.  Everyone  becomes  more  agile.  Your  communication  is 
more  secure.  Business  advantage  is  immediate.  For  a  Lotus  webcast,  visit  ibm.com/lotus/seeit 
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Large  Companies 
Spend  $10M  on  ERP 

ERP  projects  are  costing  large  com¬ 
panies  approximately  1%  of  annual 
corporate  revenues  and  taking  an 
average  of  20  months  to  implement, 
according  to  results  of  a  recent 
Meta  Group  Inc.  survey  of  more  than 
200  companies  whose  annual  rev¬ 
enues  exceed  $1  billion.  About  70% 
of  ERP  costs  are  for  labor,  Stam¬ 
ford,  Conn.-based  Meta  found.  ERP 
implementations  also  take  an  aver¬ 
age  of  27  months  before  companies 
realize  benefits  from  them. 


CSC  Wins  $80M 
Outsourcing  Pact 

Denmark’s  largest  insurer,  Tryg,  has 
signed  a  five-year,  $80  million  out¬ 
sourcing  contract  with  Computer 
Sciences  Corp.  (CSC)  in  El  Segundo, 
Calif.  CSC  will  provide  mainframe, 
midrange  and  desktop  support  as 
well  as  perform  help  desk  and  net¬ 
work  infrastructure  functions.  CSC 
will  replace  Nordea-IT,  the  IT  orga¬ 
nization  of  Tryg’s  former  owner, 
Nordea  AB,  a  Stockholm-based  fi¬ 
nancial  company.  CSC  said  it  ex¬ 
pects  seven  IT  workers  from  Tryg 
and  70  IT  workers  from  Nordea-IT 
to  sign  on  as  CSC  employees. 


Which  project 
management  tasks 
does  your  organization 
outsource? 


40.7%  40.7%  40.7% 


Complete  project  management 
•  Project  office  development 

■  Planning/scheduling 
S  Project  delivery 

■  Training 

■  Other 

BASE:  1,000  project  professionals  and  senior- 
level  executives  at  Global  2,000  companies 

SOURCE  CENTER  FOR  BUSINESS 
PRACTICES.  HAVERTOWN.  PA..  2003 
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BART  PERKINS 

What  You  Measure 
Is  What  You  Get 


A  WELL-WRITTEN  IT  services  contract  de¬ 
fines  many  client-specific  requirements. 
But  all  too  often,  the  metrics  necessary  to 
measure  and  meet  those  requirements  are 
glossed  over  during  contract  negotiations. 


Worse  yet,  service-level 
agreements  are  rarely  en¬ 
forced  as  work  progresses. 

Instead,  buyers  usually 
don’t  bother  to  look  at  the 
metrics  they  have  negotiat¬ 
ed  until  somebody  com¬ 
plains.  This  is  like  balanc¬ 
ing  your  checkbook  only  af¬ 
ter  a  check  bounces. 

Metrics  need  to  be  specif¬ 
ic,  actionable  and  designed 
to  ensure  that  the  supplier 
meets  the  buyer’s  goals. 

Metrics  that  are  highly  spe¬ 
cific  but  track  the  wrong 
things  are  useless.  One  ex¬ 
ample  is  a  call  center  that 
measured  the  length  of  calls.  Because 
the  company  was  really  interested  in 
providing  a  very  high  level  of  service,  a 
better  measure  would  have  been  the 
percentage  of  problems  resolved  on 
the  first  call.  Buyers  often  don’t  have 
sufficient  experience  defining  appro¬ 
priate  metrics.  Many  contracts  contain 
immeasurable  and  grandiose  language 
such  as  “provide  world-class  support.” 
Clearly  defined  metrics  provide  a 
baseline  against  which  supplier  per¬ 
formance  can  be  fairly  measured. 

At  contract  time,  many  suppliers 
lack  sufficient  information  about  the 
customer’s  requirements  to  propose 
useful  metrics.  (In  some  cases,  suppli¬ 
ers  hope  to  get  back  price  concessions 
by  taking  advantage  of  loosely  worded 
metrics.)  Challenge  your  supplier  to 
share  successful  metrics  from  other 
customers. 

The  buyer  is  ultimately  responsible 
for  the  success  of  any  acquired  prod¬ 
uct  or  service.  Even  when  you  out¬ 


source  a  function  com¬ 
pletely,  it’s  still  your  re¬ 
sponsibility  to  monitor  the 
provider  effectively.  Re¬ 
search  best  practices.  In¬ 
terview  peers  and  industry 
watchers  to  find  out  what 
metrics  are  commonly 
used  and  which  vendors 
are  meeting  them. 

To  get  the  most  out  of 
your  supplier  measure¬ 
ment  program,  you  should 
do  the  following: 

■  Prioritize  your  goals. 
Most  buyers  are  interested 
in  a  combination  of  finan¬ 
cial  performance,  service 
quality,  operational  excellence  and 
the  ability  to  meet  future  needs.  Artic¬ 
ulate  and  weight  each  goal  before 
negotiating. 

■  Define  metrics  early.  Metrics 
should  be  identified  and  negotiated  as 
part  of  the  initial  contract,  preferably 
by  the  same  individuals  who  will  be 
responsible  for  them  after  the  contract 
is  signed.  But  it’s  never  too  late  — 
even  where  contracts  are  already  in 
place,  negotiate  metrics  that  will  effec¬ 
tively  measure  success. 

■  Establish  operational  metrics  that 
support  your  goals.  Appropriate  met¬ 
rics  will  vary  by  company  and  by  type 
of  product  or  service  being  acquired. 
Select  metrics  that  will  accurately  as¬ 
sess  progress,  and  design  metrics  to 
influence  the  behavior  you  want.  For 
example,  monitoring  “unit  cost”  met¬ 
rics  motivates  your  supplier  to  drive 
those  costs  down  —  especially  if  there 
is  a  bonus  for  doing  so. 

■  Grade  performance.  Use  a  multi¬ 
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level  indicator  of  success,  e.g.,  letter 
grades.  If  a  supplier  realizes  halfway 
through  the  month  that  a  target  will  be 
missed,  it  may  quit  trying  if  evaluated 
strictly  “pass/fail.”  With  a  letter  grade, 
the  supplier  can  still  get  a  B  for  the 
month. 

■  Use  value-based  metrics.  Poorly 
chosen  metrics  allow  suppliers  to  meet 
their  contractual  service  levels  and  still 
disappoint  the  buyer.  For  example, 
some  suppliers  specify  the  number  of 
people  who  will  staff  a  function  in¬ 
stead  of  specifying  the  expected  out¬ 
put.  Metrics  such  as  response  time  per 
event  and  cost  per  service  unit  are  in¬ 
herently  more  useful. 

■  Use  metrics  that  support  your  cul¬ 
ture.  Companies  that  normally  operate 
based  on  data  and  numerical  analysis 
can  easily  work  with  an  extensive  set 
of  metrics.  Companies  that  are  based 
more  on  passion  and  energy  may  lack 
the  focus  for  more  than  a  small  num¬ 
ber  of  metrics  at  first.  Stay  away  from 
complex  measurement  approaches  un¬ 
til  comfort  increases. 

■  Define  trade-offs.  Prepare  to  pay 
more  for  higher  levels  of  service.  And 
be  fair  —  if  you  want  to  collect  penal¬ 
ties  for  poor  performance,  also  pay  in¬ 
centives  for  exceeding  targets. 

■  Review  performance  regularly 
with  the  supplier.  If  the  service  you 
want  is  significantly  better  than  the 
service  you  are  getting,  develop  a  ser¬ 
vice  improvement  plan  with  appropri¬ 
ate  metrics  and  timetable.  Service- 
level  agreements  form  the  basis  for 
supplier  governance  and  provide  a  sol¬ 
id  foundation  for  clear  commu¬ 
nication.  Metrics  that  are  carefully 
specified  and  consistently  reviewed 
can  help  manage  expectations  fairly 
and  accurately.  And  they  pay  off  — 
what  you  measure  is  what  you  get.  I 
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DB2.  It’s  the  ultimate  portfolio  of  real-time  information  management  software.  You  can  now  leverage 
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See  DB2  software  connect  data,  near  and  far 
See  DB2  software  connect  formats,  old  and  new. 
See  DB2  software  create  insight,  again  and  again. 
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IT  without  borders 


Are  you  contemplating  or  have  you  outsourced  part  or  all  of  your 
IT  operations?  Are  you  taking  the  on-shore  or  off-shore  route? 

What,  if  any,  obstacles  do  you  see  to  offshore  outsourcing. 

What  benefits  do  you  hope  to  reap? 

We  want  to  hear  about  your  experiences  so  we  and  your  peers  can  get 
a  clear  picture  of  where  outsourcing  stands  in  today’s  IT  strategies. 

We  invite  you  to  participate  in  the  Computerworid  and  InterUnity 
Group  survey  on  the  Best  Practices  and  Emerging  trends  in 
On-Shore  and  Off-Shore  Outsourcing. 

if  you  complete  the  entire  survey,  you  will  receive 
a  complimentary  report  of  the  findings. 

(All  responses  will  remain  confidential). 

To  participate  in  the  survey,  please  visit: 

http://websurveyor.net/wsb.dii/11829/interunityoutsource.htm 

Need  more  information?  Please  contact  research@computerworld.com. 
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Reboot.,  with  no  'U'  there 

Control  power  remotely  with  APC's  space-saving  0  "U"  MasterSwitch™ 

Control  power  to  your  valuable  connected  network  devices  using  MasterSwitch's  remote 
on/off/reboot  capability.  Ideal  for  any  situation  where  rebooting  or  power  cycling  is  required  of 
equipment  or  "locked-up"  servers.  The  MasterSwitch  mounts  vertically,  requiring  zero  U  space, 
leaving  you  with  more  room  for  your  network  equipment.  Trust  your  remote  management  needs  to 
the  leader  in  power  protection:  APC.  To  learn  more  today  visit  us  online  at  www.apc.com 

OPTIMIZED  FOR  MANAGEMENT  AND  CONTROL 


•  Wireless  Application  Protocol 

•  Boot-P  support 

•  Accessible  terminal  block  for  hardwire 
capability 

•  Event  configuration 

•  E-mail  notification 

•  Vertical  mounting,  requiring  zero  'U' 
of  space 

•  Remotely  manage  outlets  by  turning 


outlets  on/off  or  rebooting  connected 
equipment 

•  Built-in  Ethernet  interface*  for  direct 
connection  to  the  LAN 

•  MD5  authentication  security 

•  Power-up  sequencing  lets  you  configure 
the  sequence  in  which  power  to  outlets  is 
turned  on  or  turned  off. 


* Requires  separate  control 


Enter  to  WIN  a  FREE  APC  MasterSwitch™  today. 


Visit  http^/promo^pcxom  Key  Code  k414y  •  Call  888-289-APCC  x6557  •  Fax  401-788-2797 

©2003  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners.  E-mail:  esupport@apcc.com  •  132  Fairgrounds  Road,  West  Kingston,  Rl  02892  USA 


Every  product 
carrying  this  mark 
has  been  tested  and 
certified  for  use  with 
InfraStruXure™ 
architecture.  Before 
you  buy,  check  for  the 
X  to  guarantee 
product  compatibility. 


With  over  15  million 
satisfied  customers,  APC's 
Legendary  Reliability’" 
guarantees  peace  of  mind. 


InfraStruXure  j 
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Every  product  carrying  this  mark 
hos  been  tested  and  certified  for 
use  with  InfraStruXure'’ 
architecture.  Before  you  buy. 
check  for  the  X  to  guarantee 
product  compatibility 


Legendary  Reliability* 


AX2A3EP-US 


Introducing  APC’s  Rack-mount  LCD  Monitor 

As  floor  space  in  your  IT  environment  becomes  more  expensive  and  difficult  to 
allocate,  you  need  to  utilize  your  rack  enclosure  space  as  efficiently  as  possible. 

A  traditional  CRT  monitor,  monitor  shelf,  keyboard,  and  keyboard  drawer  take  up  to 
13U  of  your  valuable  rack  space.  An  APC  rack-mount  LCD  monitor/keyboard  drawer 
offers  you  the  same  functionality  while  using  only  1 U  (1 .75")  -  leaving  you  with  up 
to  12U  of  valuable  space. 

FEATURES  INCLUDE 


A  full  size  keyboard  with  104  full  On-screen  display  (OSD) 

travel  keys  and  integrated  number  "  adjustments 

pad  . .  . . 

1  ■ 

An  integrated  trackball  to  eliminate  the  need 
for  an  external  mouse 


1024x768  resolution  for 
exceptional  image  quality  for  most 
server  applications 


Active  matrix  TFT  displays  that  emit  less 
heat  and  use  less  than  half  the  power  of 
comparable  CRT  monitors 


Enter  to  WIN  a  FREE  APC  LCD  Monitor  today.  A  $2239  value!  j 
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satisfied  customers,  APC's 
Legendary  Reliability' 
guarantees  peace  of  mind. 


Ability  to  connect  to  a  server  or  KVM 
switch  via  a  standard  VGA  connector 
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CAREERS 


IT 


Principal  Software  Engineer/ 
Developer  to  provide  development 
expertise  for  relational  databases 
designed  to  support  web-based 
applications.  Will  work  on  various 
projects  providing  leadership  in  the 
design  and  development  of  data¬ 
base  systems.  Will  provide  the 
specifications,  design,  programs 
(stored  procedures,  DDL  scripts) 
and  other  necessary  database  ele¬ 
ments  for  a  successful  program. 
Will  be  responsible  for  writing  and 
supporting  import  and  export  pro¬ 
grams  using  PERL  in  a  UNIX  envi¬ 
ronment.  Will  write  stored  proce¬ 
dures  in  Oracle  (using  PL/SQL), 
Sybase  or  SQL  Server  for  SQL 
programming.  Will  apply  working 
knowledge  of  CASE  tools,  UNIX 
and  NT  environments,  and  pro¬ 
gramming  languages  including 
Shell  and  PERL.  Requires  Bachel¬ 
or  s  degree  in  Computer  Science, 
Engineering,  Mathematics,  Phys¬ 
ics,  or  Business  and  four  (4)  years 
experience  in  job  offered  OR  four 
(4)  years  experience  in  database 
development.  Candidate  must  also 
possess  demonstrated  expertise  in 
database  design  and  development 
using  SQL,  PL/SQL  and  Oracle 
XML;  demonstrated  expertise  in 
application  migration  from  Sybase 
to  Oracle  environments;  and  dem¬ 
onstrated  expertise  in  automation 
of  procedures  using  UNIX  shell 
scripting.  Salary:  $90,500/yr;  Mon- 
Fri,  9:00AM-5:00PM.  Submit  two 
copies  of  resume  to  Case  #: 
200116236,  Labor  Exchange 
Office,  19  Staniford  St.,  1st  fl, 
Boston,  MA  02114.  EOE.  Appli¬ 
cants  must  be  eligible  to  accept  full¬ 
time  employment  in  U.S. 


SENIOR  SYSTEMS  ANALYST 

Responsible  for  analysis,  design 
and  support  of  Materials 
Management  functionality  in  the 
SAP  R3  environment  including 
providing  consultative  services 
and  implementing  inventory 
management  solutions;  assist¬ 
ing  IT  Inventory  Team  Lead  with 
rollout  and  production  support  of 
R3  MM  module;  assisting  in  the 
design,  development,  imple¬ 
mentation  and  support  of 
Functional  Specifications  related 
to  ail  aspects  of  the  order  to 
cash  scope;  performing  systems 
maintenance,  enhancement  and 
production  support;  and  provid¬ 
ing  training  for  functional  busi¬ 
ness  users  as  required.  Position 
requires  minimum  of  a 
Bachelor's  degree  in  Information 
Technology  or  a  related  field  and 
two  (2)  years  experience  in  SAP 
R2  and/or  R3  configuration  and 
functionality  with  inventory  man¬ 
agement  modules.  Position  full¬ 
time,  M-F.  Salary  $75, 000/year. 
Job  is  located  in  Omaha, 
Nebraska. 

Interested  applicants  may  sub¬ 
mit  their  resumes  to  www.cona- 
grafoods.com,  click  on  "careers" 
then  "apply  now".  Note:  You 
must  type  in  the  following  code 
of  C-CMIS255  in  the  box  labeled 
"In  what  job  are  you  interested" 
in  order  to  apply  for  this  position. 
Failure  to  correctly  enter  this 
information  will  result  in  non¬ 
consideration  for  the  position. 


Seeking  qualified  applicants  for 
the  position  of  Senior  Software 
Engineer  to  perform  analysis, 
design,  programming  and  modi¬ 
fications  for  software  products 
and/or  customer  applications 
using  Korn-Shell  Scripting, 
PL/SQL,  Perl,  and  JSP/ASP. 
Requires  B.S.  or  equivalent  in 
Computer  Science  or  related 
discipline  and  five  years  of  rele¬ 
vant  experience.  Experience 
must  include  data-warehousing 
in  the  healthcare  industry. 
Submit  resume  to:  Melinda 
Morales.  NDC  Health.  2394  E. 
Camelback  Rd.,  Phoenix,  A Z 
85016. 


Sr.  Consultant  sought  by  NYC 
Computer  Consulting  firm  to 
analyze  user  needs,  to  dsgn, 
dvlp  &  implmt  medium  to  large 
scale  applies  using  technologies 
such  as  Lotus  Notes/Domino, 
Lotus  Script,  Java,  Java  Script, 
Java  Servlets,  XML,  XSL,  XSLT, 
JSP,  JDBC,  HTML,  DHTML, 
Oracle,  Win  2000/NT/95.  Must 
have  MS  in  Comp  Sci  or  Engg, 
Info  Systems  Engg  or  related 
w/3  yrs  relevant  work  exp.  Send 
resume  to  Gemini  Systems,  HR 
#SCSD,  61  Broadway,  Ste  925, 
NY,  NY  10006. 


SOFTWARE  ENGINEER 
sought  by  company  in 
Austin,  TX  which  devel¬ 
ops  software  for  comput¬ 
er-assisted  drug  discov¬ 
ery.  M.S.  in  Computer 
Science  &  exp.  req'd. 
Respond  by  resume  only 
to:  Mr.  Bryan  Koontz,  D/Y, 
Optive  Research,  Inc., 
7000  N.  Mopac 
Expressway,  2nd  FI., 
Austin,  TX  78731. 


SBI  is  looking  for  the  following 
positions  for  its  offices  in 
Houston,  TX,  San  Francisco, 
CA,  Warren,  NJ,  Salt  Lake 
City,  UT  and  Portland,  OR: 
Programmer  Analysts,  Tech¬ 
nical  Architects,  Technical 
Consultants,  Business  Strate¬ 
gists,  Systems  Analysts,  Soft¬ 
ware  Engineers,  Art  Director, 
resumes  by  email  or  fax  only 
to  HR,  SBI  2825  East 
Cottonwood  Parkway,  Suite 
480,  Salt  Lake  City,  UT 
84121: 

careers@sbiandcompany.com; 

Fax  (801)  733-3201. 


Systems  Analyst  w/5 
yrs  exp  or  5  yrs  exp 
as  Computer  Eng.  to 
coordinate  changes 
to  our  UNIX  computer 
databases.  Job  site  in 


Darien, 

CT. 

Send 

resume 

to 

HR, 

Danzas 

AEI, 

120 

Tokeneke 

Rd., 

Darien,  CT  06820. 


Western  Union,  a  Division  of 
First  Data  Corporation,  a  com¬ 
pany  headquartered  in  Green¬ 
wood  Village,  CO,  seeks  an 
Application  Architect  to  work  in 
Montvale,  NJ  to  participate  in 
application  analysis,  design  and 
development  of  software  for 
money  transfer  systems. 
Requires  2  years  as  a  software 
engineer  in  the  credit  card  pro¬ 
cessing  industry,  as  well  as 
working  knowledge  of  money 
transfer  systems,  Unisys  1100/ 
2200  platform,  ASSEMBLER 
and  COBOL.  Respond  by 
resume  only  to  Norm  Barnett. 
First  Data  Corporation,  12500  E. 
Belford  Ave.,  Mail  Stop  M21B12, 
Englewood,  CO  80112  and  refer 
to  job  #3368KU. 


Software  Engineer  needed  in 
Bank's  J2EE  Development 
Group.  Requirements:  B.S., 
expertise  in  all  phases  of  soft¬ 
ware  development  life  cycle, 
and  ability  demonstrated  on  the 
job  to  design,  develop,  imple¬ 
ment  and  test  the  technical  com¬ 
ponents  of  n-tiered  E-commerce 
applications,  using  J2EE, 
Oracle,  OOAD,  and  mainframe 
connectivity/communication 
skills.  Competitive  salary  and 
benefits.  Send  resume  to  HR, 
Webster  Bank,  10  Main  Street, 
Bristol,  CT  06010  or  email 
Surcinas@websterbank.com. 
An  Equal  Opportunity  Employer. 


Optimal  Solutions  Inte¬ 
gration,  Inc.  has  multiple 
openings  for  SAP  and  i2 
Consultants,  Software 
Analysts  and  System 
Analysts.  Please  send 
resume  with  salary  history 
and  requirements  to 
Optimal  Solutions  Integ¬ 
ration,  8445  Freeport 
Parkway  #240,  Irving,  TX 
75063.  Open  to  Green 
Card  holders  or  US 
Citizens. 


IT  Project  Ldr-Perform  device 
spec  h/w  maint  &  install  periph¬ 
eral  equip.  Prep  syst  specs, 
setup  &  tech  support  of  firmware 
programmers.  Plan,  design, 
build  &  mge  lab  test  networks, 
LAN  &  WAN  connections  incldg 
IP  satellite  uplinks.  Design  & 
prog  IT  systs  &  applications 
using  Microsoft  BackOffice 
prods  such  as  Microsoft 
Exchange,  SQL  Server,  Visual 
Basic  &  Sun  Solaris.  Write  & 
implement  network  security 
techs  &  procedures.  Bach's  deg 
in  Comp  Sci,  Physics  or  Engrg 
reqd  +  2  yrs  exp  in  job  or  2  yrs 
exp  as  Systems  Analyst.  Send 
resumes  to:  MECA/HR,  7625 
Panasonic  Way,  San  Diego,  CA 
92154,  Attn:  ITPL. 


ShellSoft  seeks  IT  professionals 
(programmer/system  analysts, 
software  engineers),  project 
engineers.  Our  minimum 
requirement  is  BS.  Good  skills 
using  Oracle,  SAP,  SQL,  Java, 
C/C++  preferred.  Some  position 
requires  travel.  Please  send 
resume  to: 

jobs@shellsoftinc.com.  EOE. 

Computer  Professionals  (pro¬ 
grammer,  system  analyst,  soft¬ 
ware  engineer)  wanted  by 
Bralak  Technologies.  Candid¬ 
ates  must  have  at  least  BS 
degree.  IT  experience  in  C/C++, 
Oracle,  SQL,  VB  is  a  plus. 
Attractive  wage  with  full  bene¬ 
fits.  Please  send  resumes  to 
recruiter@bralak.  EOE 


We  need  a  Software  Engineer  to 
develop  software  to  control  auto 
engines,  powertrain  &  fuel-injec¬ 
tion  systems.  To  design  engine 
control  algorithms  in  signal-dia¬ 
gram  form  &  write  programs  in 
C/C++/Assembly  to  implement 
them  into  Siemens  8/1 6bit 
microcontrollers.  Use  Matlab, 
ASCET-SD,  INCA,  CANalyzer, 
Hitex/Hitop  debuggers  &  PVCS 
tools.  Job  in  Davenport,  IA. 
Related  Deg.  &  Exp.  required. 
Send  resume  with  Ref: 
ICG/PR/001/2003  to  Nawroz 
Salam,  ENTEGEE  Inc.,  150 
Bear  Hill  Road,  Waltham,  MA 
02451  or  Email: 

entegee.boston@entegee.com 
within  14  days. 


Software  Application  Engin¬ 
eer:  program,  install,  config¬ 
ure,  setup,  develop  and  debug 
web  based  Human  Resource/ 
Payroll  database  applications, 
interact  with  customers.  Duties 
include:  utilizing  SQL  Ser¬ 
ver,  Visual  Interdev,  Java 
Script,  ASP  platform  and 
Ceridian  payroll.  Education 
Required:  Bachelors  Degree  in 
Computer  Engineering  and 
one  year  experience  or  equiva¬ 
lent.  Send  resumes  to  iSarla 
Inc.,  699  Fall  River  Ave. 
Seekonk,  MA  02771  or  fax: 
1  (508)  336-5894. 


Mascon  has  mult,  openings 
avail,  for  IT  professionals  and 
Senior  Consultants.  Duties  will 
include  but  will  not  be  limited  to 
developing  and  designing  S/W 
systems  using  various  H/W,  O/S 
tools,  software  packages  and 
languages;  developing  client 
server,  mainframe,  midrange,  erf 
&  web  applications.  A  degree  is 
requred.  WE  will  accept  foreign 
equiv.  of  the  required  educ. 
and/or  its  equiva  in  edu.  and 
experience.  Competitve  salaries 
offered.  Must  have  experienced 
or  education  in  the  IT  field.  Apply 
at:  mascon-recruiting@mas- 

conit.com  Mascon  HR  1699  E 
Woodfield  Rd,  Schaumburg,  IL 
60173 


Ease  seeks  S/W  Engr.  for  HQ 
office  in  Portland,  OR.  DESC: 
Impl.  optimized  code  across 
industrial  &  consumer  oriented 
tech  apps  through  dsgn  &  impl 
of  sys  level  firmware  &  s/w  apps 
util  C/C++,  assembly  langs,  & 
var  embedded  &  RTOS.  REQ: 
BS  in  Engr,  CS,  Math,  or 
Physics  +  5  yrs  exp  dsgn  &  impl 
of  sys  level  firmware  &  s/w  apps 
util  C/C++  &  assembly  langs  to 
run  on  embedded  &  RTOS. 
Prem.  sal.  +  benes.  Pis  reply  to 
J  Klinker,  Job  #ES-101,  9999 
SW  Wilshire  Street,  Suite  231, 
Portland,  OR  97225. 


Trading  Floor  Lead  Specialist 
sought  by  NJ  based  Secur¬ 
ities  Dealer  for  San  Francisco, 
CA  office.  Must  possess 
Bachelor  s  degree  or  equiva¬ 
lent  in  Management  Informa¬ 
tion  Systems  or  directly  relat¬ 
ed  field  and  1  year  exp.  in 
software/systems  develop¬ 
ment,  design  and  analysis 
including  UNIX  and  PC  sys¬ 
tems.  Respond  to:  Human 
Resources  Department  #TJX- 
861  Ml,  Knight  Trading  Group, 
525  Washington  Blvd.,  Jersey 
City,  NJ  07310. 


Systems  Analysts  needed 
at  client  sites  to  analyze  & 
eval  systems;  provide  archi¬ 
tecture  for  systems  &  inter¬ 
act  w/client/teams  to  enable 
strategy  using  Oracle 
D/base  &  Oracle  Apps, 
Discoverer,  SQL,  PL/SQL, 
Unix,  XML,  HTML,  Sun 
Solaris,  BAAN,  SAP,  Siebel 
(Tools  &  Appl),  Power 
Designer,  Apply  to  Global 
Consultants,  25  Airport  Rd, 
Morristown,  NJ  07960. 


Seeking  qualified  applicants  for 
the  following  positions  in 
Memphis/Collierville,  TN:  Senior 
Programmer  Analyst.  Formulate 
/define  functional  requirements 
and  documentation  based  on 
accepted  user  criteria.  Require¬ 
ments:  Bachelor  s  degree  or 
equivalent  in  computer  science, 
MIS,  engineering  or  related  field 
plus  5  years  of  experience  in 
systems/applications  develop¬ 
ment.  Experience  with  Java, 
Unix  and  SQL  programming  also 
required.  ’Masters  degree  in 
appropriate  field  will  offset  2 
years  of  general  experience. 
Submit  resumes  to  Sibi  George, 
FedEx  Corporate  Services, 
1900  Summit  Tower  Blvd.,  Suite 
1400,  Orlando,  FL  32810.  EOE 
M/F/D/V. 


NEED  TO  HIRE? 
START  WITH  US! 


iTcareers  and  ITcareers.com 
reach  more  than  2/3  of  all  US 
IT  workers  every  week.  If 
you  need  to  hire  top  talent, 
start  by  hiring  us. 

Call  your  ITcareers  Sales 
Representative  or  Nancy 
Percival  at 
1-800-762-2977. 

IT  CAREERS 

where  the  best  get  better 


A 


Better 
Job  At 


Helping  You 
Get  One. 

iTlcareers.com 
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Senior  Systems  Developer 
sought  by  Charlotte,  NC 
based  Information  Tech¬ 
nology  Consultants  for 
Greensboro,  NC  office.  Must 
posses  Bachelor’s  degree  or 
equivalent  in  Electrical 
Engineering  or  directly  related 
field  and  2  years  exp.  in  sys¬ 
tems  development/design 
and  analysis  including  JAVA 
and  Rational  Rose.  Respond 
to:  Human  Resources 

Department:  J.  Connell; 
Premier  Alliance  Group,  4521 
Sharon  Road,  Suite  300, 
Charlotte,  NC  28211. 


A  multinat'l  software  consult¬ 
ing  co.  has  multp.  openings 
for  Business  Development 
Managers.  Duties  will  include 
a  thorough  understanding  of 
the  IT  industry.  Experience  is 
a  must.  A  degree  is  required 
or  its  foreign  equiv.  or  its 
equiv.  in  edu/experience. 
Apply  at  MASCON  HR,  1699 
E.  Woodfield  Rd„  Ste.  200, 
Schaumburg,  IL  60173  or  e- 
mail  at  mascon-recruiting@ 
masconit.com 


Denso  Manufacturing  is  a  sub¬ 
sidiary  of  Denso  Corp  in  Japan. 
It  looks  Electrical  or  System 
Engineers  to  design  unique 
equipment  for  manufacturing 
process.  Candidate  must  have 
BS  in  Electrical  eng.  with  exp 
using  Allen  Bradley.  Contact 
Sandra-boland@denso-diam.com. 
EOE. 

RW3  Technologies  is  a  leading 
provider  of  CRM  solutions  for 
Consumer  Packaged  Goods 
industry.  It  has  opening  for  pro¬ 
grammer/computer  analyst. 
Minimum  requirement  is  BS  with 
experience  in  Crystal,  SQL, 
Apache.  Send  resume  to  1033 
Laposada,  Ste  250,  Austin,  TX 
78752. 


System  Engineer.  Respon¬ 
sible  for  system  administra¬ 
tion  for  Windows  operation, 
Linux,  and  AIX  environment, 
troubleshooting,  networking 
issues,  software  upgrades, 
implement/maintain  all  net¬ 
work,  Webserver,  backup  and 
disaster  recovery  documenta¬ 
tion.  Req  s  min  BSCS  plus  3 
yrs  exp  &  familiarity  with 
databases  (SOL  &  MySOL)  & 
exchange  2000.  Send  resume 
to:  Joseph  Kong,  Asia  Pacific 
Groups,  1290-24th  Ave,  San 
Francisco,  CA  94111.  EOE 


Manager,  O&T,  to  coordinate  com¬ 
puterization  of  clients  business 
operations.  Apply  Integration  and 
ERP  skills  to  Operations  Mgmt., 
accounting,  payroll,  taxes,  check 
writing,  cash  register  records, 
inventory  mgmt.,  ordering  of  sup¬ 
plies,  merchandise  and  equipment, 
supply  chain  management.  Eval¬ 
uate  existing  hardware/software, 
computer  networks  and  recom¬ 
mend  upgrades.  Supervise  pro¬ 
grammers,  analysts  other  team 
members  involved  in  project  execu¬ 
tion.  ME  or  MS  degree  in  Engin¬ 
eering  or  Science  +  2  yrs.  exp.  in 
job  duties.  Apply  to  A-1  Consulting. 
4278  Covington  Highway,  Decatur, 
GA  30035  with  proof  of  permanent 
work  authorization. 


Mobile  computing  technology 
development  company  seeks  a 
senior  software  engineer  with 
4yrs  B.S.  degree  in  science, 
software  engineering,  systems 
engineering,  or  programmer 
analyst  and  5  yrs.  relevant  expe¬ 
rience.  This  job  position  requires 
high  level  of  analytical  and 
design  skills  to  build  integrated 
solutions.  Would  perform  each 
task  in  the  engineering  lifecycle 
of  building  a  software  product 
including  analysis,  design,  cod¬ 
ing,  testing  and  maintenance  of 
the  application  and  manages  the 
project.  The  candidate  will  lead 
projects  including  reviewing  and 
analyzing  business  needs  and 
building  the  appropriate  solution. 
Will  provide  internal  application 
support  by  providing  technical 
and  consulting  services  for  new 
business  initiatives.  The  candi¬ 
date  must  demonstrate  sound 
program  logic  and  perform  post 
implementation  review  to  ensure 
all  requirements  have  been  met. 
The  tasks  would  include  working 
on  application  development  that 
involve  COM/DCOM  distributed 
computing,  client/server  data¬ 
base,  SQL  server,  Internet 
Information  Server  programming 
and  XML.  The  candidate  must 
be  proficient  in  C/C++  and  Java. 
One  particular  solution  is  the 
conduit  technology  integration, 
which  would  link  the  web  with 
the  PDA/phone  device.  40  hrs. 
9a-5p.  Sal.  $96000.  Reports  to 
VP,  Engineering.  Qualified  can¬ 
didates  send  two  copies  of 
resume  to:  Case#  200200638, 
Labor  Exchange  Office,  19 
Staniford  Street,  1st  floor, 
Boston,  MA  02114. 


Computer  Software  Engin¬ 
eer  needed  to  work  in  all 
functional  areas  of  project 
life  cycle:  conduct  busi¬ 
ness  analysis,  application 
dvlpmt;  ensure  software 
processes/products  con¬ 
form  to  requirements, 
standards  &  procedures. 
Must  have  Master  s 
degree.  Send  resume  to: 
Global  Resource  Manage¬ 
ment,  250  Pinnacle  Way, 
Norcross,  GA  3007 1 . 


Junior  Programmer  (North  Palm 
Beach,  FL):  Write  and  fix  system 
software  in  PERL,  HTML  and 
JAVASCRIPT  in  a  Unix 
Environment.  Program  Perl 
Modules/APIs  utilizing  ODBC/ 
DBI  utilities.  Produce  system 
documentation  for  new  prod¬ 
ucts.  Technical  support  for  web¬ 
site  and  performance  degrada¬ 
tion.  Troubleshoot  reservations 
systems,  including  writing  code. 
Utilize  knowledge  of  Apache 
running  Raven  and  Modperl, 
XML,  Perl,  Perl  ODBC/DBI, 
HTML,  Javascript,  Window  NT 
and  Windows  2000,  Unix, 
PVCS,  Sabre  and  Pegasus. 
Minimum  of  Bachelor's  degree 
in  Computer  Information  Sys¬ 
tems;  and  6-month  experience 
in  job  offered  or  6-month  experi¬ 
ence  as  a  Technical  Support 
Assistant.  40  hour/week;  9  a.m.- 
5:30  p.m.;  $46,000/year.  Please 
send  two  resumes  to:  Jean 
Wroblewski,  President, 

WorldChoiceTravel.com,  Inc., 
11300  U.S.  Highway  1,  Suite 
300,  North  Palm  Beach,  FL 
33408. 


Software  Engineering  Project  Man¬ 
ager  to  be  responsible  for  leading 
the  creation  of  Internet  products  for 
Company  s  website.  Will  also  de¬ 
velop  401k  website  for  clients,  and 
oversee  the  development  &  mainte¬ 
nance  of  the  sophisticated  software 
systems  that  support  the  electron¬ 
ic  channel  group  s  web-based  ap¬ 
plications.  Will  serve  as  technical 
lead  on  various  project  teams  fo¬ 
cusing  on  all  aspects  of  web  devel¬ 
opment,  involving  ASP,  HTML, 
Java  Script  &  software  develop¬ 
ment  in  C++.  Will  work  with  engi¬ 
neers  &  designers  to  bring  state- 
of-the-art  products  to  market  quick¬ 
ly  using  unique  methods.  Will  con¬ 
ceive  and  design  complex  leading- 
edge  Internet  applications  using 
VC++  6.0;  VB  6.0;  COM/DCOM; 
MTS;  IIS;  ASP;  XML;  DHTML  and 
relational  databases  applying  ex¬ 
perience  in  web/I ntemet  architec¬ 
tures,  object-oriented  design  & 
financial  services.  Will  also  mentor 
junior  development  staff  members. 
Requires  Bachelor  s  degree  in 
Computer  Science,  Computer  En¬ 
gineering,  Engineering,  Mathemat¬ 
ics,  or  Physics  and  five  (5)  years 
experience  in  job  offered  OR  five 
(5)  years  experience  in  developing 
web-based  applications.  OR,  in  the 
alternative,  Masters  degree  in 
Computer  Science,  Computer  En¬ 
gineering,  Engineering,  Mathemat¬ 
ics,  or  Physics  and  three  (3)  years 
experience  in  job  offered  OR  three 
(3)  years  experience  in  developing 
web-based  applications.  Candidate 
must  also  possess  demonstrated 
expertise  developing  middleware 
applications  using  COM/DCOM,  as 
well  as  demonstrated  expertise 
developing  and  designing  web 
applications  in  Visual  C++  and  XML 
using  OQ  methodologies.  Salary: 
$104,650/yr;  Mon-Fri,  9:00AM- 
5:00PM.  Submit  two  copies  of 
resume  to  Case  #:  200116235, 
Labor  Exchange  Office,  19 
Staniford  St.,  1st  fl.,  Boston.  MA 
02114.  EOE.  Applicants  must  be 
eligible  to  accept  full-time  employ¬ 
ment  in  U.S. 


NT  SYSTEMS  ADMINISTRATOR; 
Will  provide  support  for  the  Win¬ 
dows  NT  server  environment.  Will 
perform  operating  system  and  ap¬ 
plication  software  installations  and 
upgrades,  including  patch  releases 
as  necessary.  Will  perform  hard¬ 
ware  upgrades,  maintenance,  and 
system  backups  on  a  regular  bas¬ 
is.  Will  maintain  and  update  sys¬ 
tems  operating  procedures.  Will 
ensure  system  integrity  by  main¬ 
taining  and  updating  anti-virus  soft¬ 
ware.  Will  maintain  internet/intranet 
infrastructure.  Will  deploy  and 
maintain  video  conferencing  capa¬ 
bility.  Will  respond  to  second  tier 
requests  through  the  helpdesk 
process.  Will  lead  projects  as 
assigned  with  minimal  supervision. 
Requirements:  B.S./B.A.  (for  equiv) 
in  Computer  Science  or  closely 
related  field  and  two  (2)  years  of 
experience  in  the  job  offered  or  two 
(2)  years  experience  in  the  related 
occupation  of  System  Administra¬ 
tion  or  Programming.  Also,  demon¬ 
strated  expertise  in  using  three  of 
the  following:  Microsoft  BackOffice 
Suite;  TCP/IP;  Citrix  Server;  Mc¬ 
Afee  Antivirus  Suite.  In  addition 
demonstrated  expertise  working  in 
a  multi-vendor  environment.  Must 
be  MCSE  certified.  Offered  salary 
is  $45, 000/year  for  full-time  em¬ 
ployment  (min.  40  hours  per  week) 
and  standard  company  benefits. 
EEO.  Submit  2  resumes  and 
respond  to  Case  No.  2002  01345, 
Labor  Exchange  Office,  19 
Staniford  Street,  1st  Floor,  Boston, 
MA  02114. 


Systems  Analyst  w/int  I  IT 
consultants,  to  work  at  vari¬ 
ous  client  sites  in  the  U.S. 
and  abroad.  Implmt,  main¬ 
tain  &  upgrade  Oracle  ERP 
s/ware  pkgs.  Reqs:  Bach  in 
Comp  Sci,  Engineering, 
Business,  Logistics,  HR,  or 
closely  related  field  +  2  yrs 
exp  w/Oracle  applic.  or 
dbs.  Send  resumes,  refs, 
and  salary  requirements  to 
Attn:  Hr,  IT  Convergence, 
150  E.  Gilman  St.,  Suite. 
B2200,  Madison,  Wl  53703. 


Discover  great  jobs  in  IT  with  leading  employers  at  the. 


DC  Area's  Largest  Diversity 

CAREER  FAIR 

naacpcareerfair.com  •  a  Shomex  event 


including  the 

Security  8  Defense  Career  Expo 

Presented  by  the  NAACP  Region  VII  and  the  Washington,  DC  Branch 

MON.,  MAY  19,  2003  TUES.,  MAY  20,  2003 

McLean  Hilton  Hotel  Martins  Crosswinds 

7920  Jones  Branch  Drive  •  Tysons  Corner,  VA  221 02  7400  Greenway  Center  Drive  •  Greenbelt,  MD  20770 

Exhibit  Hours  For  Both  Events:  1 1:30  am  to  4:30  pm  •  Seminars  For  Both  Events  Begin  At  10:30  am 

Business  Attire,  Resumes  and  3  or  More  Years  Experience  Required.  No  One  Under  21  Years  of  Age  Will  Be  Admitted 

Gold  Sponsor:  MERCK 

Professionals  with  Active  Security  Clearances  are  in  high  demand. 


FREE  ADMISSION  TO  THE  EXHIBITS  &  SEMINAR! 


May  19th  Exhibitors:  Accenture  •  Accenture  Technology  Solutions  •  The  Aerospace  Corporation  •  Allstate  Insurance  Co.  • 
American  Express  Financial  Advisors  •  Arlington  County  Government  •  Blockbuster  •  Canon  USA,  Inc.  •  Central  Intelligence 
Agency  •  Check  'N  Go  •  Computer  Associates  •  Computer  Sciences  Corporation  •  DigitalNet  •  Dollar  Tree  Stores  •  Eli  Lilly 
and  Company  •  GE  Financial  •  Integic  Corporation  •  Intelsat  •  L-3  Communication  Systems-Eost  •  ManTech  International 
Corporation  •  Northrop  Grumman  Mission  Systems  •  Pfizer,  Inc.  •  Pepco  •  Raytheon  •  Richmond  Police  Dept.  Richmond  VA  • 
Staples  Inc.  •  Wachovia  •  United  Stales  Secret  Service  •  XM  Satellite  Radio,  Inc.  •  York  County  School  Division 

May  20th  Exhibitors:  Allstate  Insurance  Co.  •  American  Express  Financial  Advisors  *  Andrews  Federal  Credit  Union  *  Arlington 
County  Government  •  Bed  Bath  &  Beyond  •  Central  Intelligence  Agency  •  Data  Computer  Corporation  of  America  • 
GlaxoSmithKline  •  Merck  &  Co.,  Inc.  •  NASD  •  Pfizer,  Inc.  •  Raytheon  •  US  Patent  &  Trademark  Office  •  Wal-Mart  Stores,  Inc. 

For  information  on  exhibiting,  please  call  Cristopher  Levy  at  (310)309-4404. 


Lead  Applications  Developer 

Lead  worker  for  development, 
maintenance  and  enhancement  of 
web  computer  applications.  Per¬ 
form  logical  and  physical  database 
design.  Manage  assigned  projects 
utilizing  comprehensive  project 
management  practices.  Must  be 
able  to  design,  develop  and  imple¬ 
ment  dynamic  web  applications. 
Perform  project  management  and 
make  assignments  to  team  mem¬ 
bers.  Responsible  for  content  man¬ 
agement,  database  development, 
application  development,  quality 
assurance  R&D,  site  architecture 
and  security  and  technical  docu¬ 
mentation.  Bachelor  s  in  Computer 
Science  or  MIS,  Certified  Cold 
Fusion  developer,  experience  with 
Microsoft  NT,  IIS,  Java  script, 
HTML,  SQL,  MS  Office,  Project  and 
Outlook.  4  years  experience  as 
Lead  Web  Developer  required. 
$52, 998/year.  Must  have  legal 
authority  to  work  in  the  United 
States.  Send  resume  to: 

Madhavi  Bhadbhade 
Nebraska  Workforce  Development 
P.O.  Box  94600 
Lincoln.  NE  68509-4600 
Please  reference  Job  Order  # 
SBAH5-M2QP6-14220  on  your 
resume/cover  letter. 


Software  Engineer 

Resp.  for  all  tech.,  oper.  &  impl. 
throughout  co.  Implement  new 
tech,  to  make  company  more  effi¬ 
cient;  develop,  impl.,  &  maintain  a 
contact  management  database; 
manage  co.  s  network  incl.  hard¬ 
ware  &  software  troubleshooting, 
repairs,  &  software  updates;  admin¬ 
ister  Linux  Email  server  &  mailing 
lists;  provide  tech,  support  &  train¬ 
ing;  develop  &  support  co.  s  web¬ 
site.  B.S.  in  Math,  or  CS  &  abil.  to 
use  MS  Windows  2000/NT/98/95, 
Linux,  SQL,  C/C++,  Perl,  MS  Visual 
Basic,  DHTML,  ASP,  JavaScript, 
Perlscript,  VBscript,  MS  SQL 
Server  7.0/2000,  TCP/IP  adm., 
LAN/WAN  adm.,  Web-design  & 
adm.,  E-mail  systems  adm.  Must 
have  certificates:  MS  SQL  Server  7 
Programming,  TCP/IP  Administra¬ 
tion,  MS  SQL  Server  7  Administra¬ 
tion,  Internet  Security.  40.0  hr/wk. 
9-6  Send  resume  to:  Mr.  Michael  P. 
Broxterman,  Chief  Operating 
Officer,  Pinnacle  Health  Group, 
5887  Glenridge  Dr.,  Ste.  200, 
Atlanta.  GA  30328. 


Jr.  Consultant  sought  by  NYC 
Computer  Consulting  firm  to 
analyze  user  needs,  to  dsgn, 
dvlp  &  implmt  medium  to  large 
scale  applies  using  technologies 
such  as  Lotus  Notes  &  Domino, 
Lotus  Script,  HTML,  DHTML, 
Java  Script,  ASP,  VB,  Global 
Knowledge,  Formula,  IIS,  MS 
Office/Projects/Visio.  Must  have 
MS  in  Comp  Sci  or  Engg,  Info 
Systems  Engg  or  related  w/1  yr 
of  relevant  work  exp.  Send 
resume  to  Gemini  Systems,  HR 
#JCTM,  61  Broadway,  Ste  925, 
NY.  NY  10006. 


Sr.  Info.  Systems  Specialist  wanted 
for  investigation,  development  and 
maintenance  of  complex  software 
requirements  for  engineering  and 
manufacturing  operations,  includ¬ 
ing  reviewing  and  evaluating  re¬ 
quests  for  changes  in  existing  sys¬ 
tems,  determining  modifications  to 
meet  new  requirements  and  im¬ 
proving  operation  of  existing  ones; 
planning  and  developing  new  appli¬ 
cations  and  major  conversions  to 
new  equipment.  40  hrs/wk,  8  am  - 
5  pm;  $63,000/yr;  requires  Bachel¬ 
or  s  degree  in  Computer  Science  or 
Electronics  Engineering,  and  5  yrs 
exp.  in  job  offered,  or  5  yrs.  related 
exp.  as  Systems  Analyst,  and  exp 
to  include  at  least  2  yrs.  in  develop¬ 
ment  and  maintenance  of  software 
systems  for  automotive  applica¬ 
tions.  Send  resume  to:  MDCD/ 
ESA.  P.O.  Box  11170,  Detroit,  Ml 
48202-1170,  Ref.  No;  210479 
Employer  Paid  Ad  . 


Consultants 


For  its  clients  located  all  over  the 
United  States,  Netbriefings.com, 
Inc.,  is  accepting  applications 
from  experienced  Consultants 
for  the  following  positions: 

•  Network  Systems  Admn:  Ana¬ 

lyze,  design,  network  sys¬ 
tems,  data  communication,  & 
network  security  systems  in 
multi-platform  environments, 
architect  &  develop  enterprise 
network  management  sys¬ 
tems  &  network  operation 
centers.  Bachelors  degree  in 
Electronics,  Telecommunica¬ 
tions,  Comp.  Sci.  and  experi¬ 
ence  including  Micromuse 
Netcool  and  HP  Open  View 
Products  required. 

•  Programmer  Analyst:  Develop 

applications  for  the  embed¬ 
ded  systems,  real  time  de¬ 
vices,  scanners,  mobile  de¬ 
vices,  PDA's  and  Hand  held 
PCS.  Bachelors  degree  in 
Comp.  Sci.,  MIS/IS,  and  ex¬ 
perience  including  embedded 
systems,  WAP  and  VC++  on 
WIN  CE  Platforms  required. 

•  Business  Analyst:  For  financial 

and  investment  industry  cli¬ 
ents.  formulate  Business  In¬ 
formation  Systems  solutions 
in  compliance  with  govern¬ 
ment  regulations,  align  IT 
solutions  with  business  initia¬ 
tives  and  vice  versa,  render 
analysis  for  Business  Pro¬ 
cess  Outsourcing  (BPO),  pro¬ 
vide  process  guidance  at 
each  step  of  the  project.  Ba¬ 
chelors  degree  in  Computer 
Science.  MIS/IS  and  experi¬ 
ence  including  analysis  of 
financial  systems  and  e-Bus- 
iness  systems,  RUP  and 
tools,  and  knowledge  of  SEC, 
FDIC  government  regulations 
required. 

Resumes  with  references, 
salary  requirements  &  perma¬ 
nent  employment  authorization 
status  to:  Vish  Subramariian, 
General  Manager,  Netbriefings 
.com,  Inc.,  421  N.  Wabasha  St.. 
Ste.  202,  St.  Paul.  MN  55102. 
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IT  CAREERS 


Positions  are  available  for 
Software  Development  Engin¬ 
eers  I  in  Atlanta,  Georgia  with  a 
technology  solutions  company. 
The  company  architects  and 
designs  next  generation  soft¬ 
ware  for  point-of-sale  and 
Internet  systems  in  the  retail 
industry  including  entertainment, 
petroleum  with  convenience  or 
food  stores,  and  restaurants. 

The  Software  Development 
Engineers  I  -  Web  Application 
Development  will  be  primarily 
responsible  for  designing,  devel¬ 
oping,  and  implementing  soft¬ 
ware  for  new  and  existing  pro¬ 
grams  for  end  user  applications. 

Candidates  for  these  positions 
should  possess  a  Bachelor's 
degree  in  a  computer  field  and 
demonstrated  knowledge  of 
C++,  VB,  XML,  ASP,  XSL, 
HTML,  Java  Script,  and  SQL; 
Object  Oriented  programming; 
technical  documentation  and 
software  engineering  method¬ 
ologies;  relational  databases 
including  SQL  Server  or  Oracle; 
and  set-up  and  configuration  of 
one  of  the  following  Microsoft 
operating  systems:  Windows 
OS,  Windows  NT,  Windows 
2000,  or  Windows  XP. 
Reference  Job  Code  #0030/38. 

The  Software  Development 
Engineer  I  -  Point  of  Sale  is  pri¬ 
marily  responsible  for  designing 
and  implementing  point-of-sale 
software  for  new  and  existing 
applications.  Specific  responsi¬ 
bilities  include  analyzing,  pro¬ 
gramming,  debugging  and  mod¬ 
ifying  computer  programs. 

Candidates  for  this  position 
should  possess  a  Bachelor's 
degree  in  Computer  Science  or 
a  related  field  and  demonstrated 
knowledge  of  C++,  Object 
Oriented  programming,  relation¬ 
al  databases,  technical  docu¬ 
mentation,  software  engineering 
methodologies,  TCP/IP  network¬ 
ing,  one  of  the  following  pro¬ 
gramming  languages:  Java, 
Clipper  or  Delphi;  and  set-up 
and  configuration  of  one  of  the 
following  operating  systems: 
Windows  NT,  Windows  2000,  or 
Windows  XP.  Reference  Job 
Code  #0031 

The  Software  Development 
Engineer  I  -  Windows  will  be  pri¬ 
marily  responsible  for  designing, 
developing  and  implementing 
software  for  new  and  existing 
programs. 

Candidates  for  this  position 
should  possess  a  Bachelor's 
degree  in  a  computer  field  and 
Demonstrated  knowledge  of 
C++,  Object  Oriented  program¬ 
ming,  Windows  GUI  program¬ 
ming  including  Win32API  or 
MFC,  set-up  and  configuration 
of  one  of  the  following  Windows 
OS,  Windows  NT,  Windows 
2000,  or  Windows  XP,  technical 
documentation  and  software 
engineering  methodologies,  and 
one  of  the  following  relational 
databases:  Oracle,  SQL  Server 
or  DB/2.  Reference  Job  Code 
#0034.  Apply  with  resume  by 
mail  to:  Vickie  Olsen,  Radiant 
Systems,  Inc.,  3925  Brookside 
Parkway,  Alpharetta,  Georgia 
30022 


Software  co.  in  Bedford,  MA  seeks 
QA  Systems  Analyst  for  quality 
assurance  testing  and  engineering 
on  ERP  software,  including  devel¬ 
op/implement  automated  and  man¬ 
ual  test  cases;  identify/resolve 
bugs;  define  Test  Plans  and  Objec¬ 
tives  for  Integration  software  pack¬ 
age;  and  participate  as  QA  repre¬ 
sentative  on  teams  for  future  prod¬ 
ucts.  Must  have;  Bach,  in  Comp. 
Sd.  or  equiv.;  2  yrs  exp.  in  software 
development  or  testing;  knowledge 
of  ERP  software  systems,  integra¬ 
tion  with  financial  packages  such 
as  Oracle  Financials,  Peoplesoft  or 
SAP.  Salary  $64,000/yr.  Submit  2 
resumes  to  Case  #200201351, 
Labor  Exchange  Office,  19 
Staniford  Street,  1st  fl„  Boston.  MA 
02114 


Positions  are  available  for 
Quality  Engineer  Analysts  II  and 
a  Software  Development 
Engineer  II  in  Atlanta,  Georgia 
with  a  technology  solutions  com¬ 
pany.  The  company  architects 
and  designs  next  generation 
software  for  point-of-sale  and 
Internet  systems  in  the  retail 
industry  including  entertainment, 
petroleum  with  convenience  or 
food  stores,  and  restaurants. 

The  Quality  Engineer  Analysts  II 
will  be  primarily  responsible  for 
designing,  implementing,  docu¬ 
menting,  and  maintaining  soft¬ 
ware  programs  for  computer- 
based  systems.  Also  designs, 
develops,  and  implements  tests 
and  evaluates  results  for  all 
product  components. 

Candidates  for  these  positions 
should  possess  a  Bachelor's 
degree  in  Computer  Science, 
Engineering  or  a  related  field 
and  two  years'  experience  with 
regression,  integration,  function¬ 
al,  and  stress  testing,  writing  test 
plans,  test  scripts,  and  technical 
documentation,  relational  data¬ 
bases  including  SQL,  Windows 
operating  system  and  issue 
tracking  software.  The  job  also 
requires  demonstrated  knowl¬ 
edge  of  C  programming  and  test 
lab  set  up  including  software 
installation,  hardware  configura¬ 
tion,  and  networking  computers. 
Reference  Job  Code  #005/37 

The  Software  Development 
Engineer  II  -  Decisions  Support 
Systems  is  primarily  responsible 
for  developing  decision  support 
software  for  major  subsystems 
or  sets  of  applications.  Specific 
responsibilities  include  evaluat¬ 
ing  competitive  forecasting  prod¬ 
ucts  with  an  emphasis  on  accu¬ 
racy  and  performance. 

Candidates  for  this  position 
should  possess  a  Bachelor's 
degree  in  Computer  Science  or 
a  related  field  and  at  least  two 
years'  experience  with  statistical 
methods  such  as  autocorrela¬ 
tion,  spectrum  analysis,  or  expo¬ 
nential  smoothing;  time  series 
analysis;  writing  technical  docu¬ 
mentation;  data  modeling;  one 
of  the  following  programming 
languages:  C,  C++,  or  Visual 
Basic;  and  demonstrated  knowl¬ 
edge  of  SQL.  Reference  Job 
Code  #0021.  Apply  by  mail  to: 
Vickie  Olsen,  Radiant  Systems, 
Inc.,  3925  Brookside  Parkway, 
Alpharetta,  Georgia  30022 


PROGRAMMER  ANALYSTS  for 
Chicago,  IL  office.  Design  & 
Develop  software  applications 
using  Oracle,  Developer  2000, 
Designer  2000,  Erwin,  C++, 
Dataware  Housing,  XML, 
Coolgen,  ASP;  Develop  data¬ 
bases  in  oracle,  SQL  server  on 
Windows  &  Unix.  Bachelors 
req  d  in  Computers,  Engineering 
or  related  field  of  study  +2  yrs  of 
related  exp.  40  hrs/wk.  Must 
have  legal  authority  to  work  per¬ 
manently  in  the  U.S.  Send 
resume  to  HR  Manager,  Vigna 
Solutions,  Inc.,  4101  Chain 
Bridge  Rd,  Fairfax,  VA  22030. 


An  Atlanta-based  IT  firm  is  seek¬ 
ing  qualified  computer  profes¬ 
sionals  like  Programmer  Ana¬ 
lysts,  Systems  Analysts,  Data¬ 
base  Adminstrators,  for  assign¬ 
ments  to  clients  sites  in  the  U.S. 
Must  have  bachelor  s  degrees  in 
Comp.  Sci.  or  Math  or  Engin¬ 
eering,  with  extensive  (at  least  2 
yrs)  exp.  in  Oracle,  Powerbuilder, 
Java,  Perl,  C/C++,  and  .NET. 
Must  be  willing  to  work  in  differ¬ 
ent  clients  sites  throughout  the 
U.S.  Send  resumes  with  salary 
requirements  to:  The  Recruit¬ 
ment  Manager,  SourceTec,  292 
S.  Main  Street.  Suite  500, 
Alpharetta,  GA  30004. 


Infinite  Computing  Systems  a 
Cedar  Rapids,  Iowa  company  is 
seeking  qualified  computer  pro¬ 
fessionals  for  our  growing  team. 
Current  positions  available  must 
meet  the  following  requirements. 
All  positions  require  at  least  a 
Bachelors  degree  (foreign 
Bachelor  degrees  are  accept¬ 
able).  We  may  have  additional 
positions  available  in  addition  to 
the  ones  listed.  Multiple  posi¬ 
tions  are  likely  available  in  some 
positions.  Candidate's  salary 
offered  relative  to  experience 
and  skills.  Candidates  must  be 
willing  to  relocate  and  travel  as 
needed. 

•  At  least  1  yr  exp  as  a  comput¬ 
er  professional,  incl.  at  least  1 
yr  exp  in  Expeditor,  IDMS,  DB2, 
Unix,  Fortran,  C++  and  File  Aid. 

•  At  least  2yrs  exp  as  a  comput¬ 
er  professional,  incl.  at  least  2 
yrs  exp.  in  SAP,  Java,  HTML, 
and  Weblogic. 

•  At  least  2yrs  exp  as  a  comput¬ 
er  professional,  incl.  at  least  2 
yrs  exp  in  Formware,  ICR/OR 
recognition,  Imaging,  File  Net, 
PC-Docs,  Visual  Basic,  Java, 
SQL  Server. 

•  At  least  2yrs  exp.  as  a  com¬ 
puter  professional,  incl.  at  least 
2  yrs  exp  in  MS  T ranslation 
Server,  VB,  Developer  2000, 
Magic,  Oracle,  and  SQL  Server. 

•  At  least  5  yrs  exp.  as  a  com¬ 
puter  professional,  incl.  at  1  yrs 
exp  in  Easytreive,  QMF,  MF- 
Cobol  and  MF-CICS. 

•  At  least  5  yrs  exp  as  a  com¬ 
puter  professional  using  C, 

C++,  VC++,  Oracle,  GUI,  and 
SQL  Server. 

Please  send  resume  and  cover 
letter  to:  Rajendra  Inani, 
President,  Infinite  Computing 
Systems,  Inc.,  230  2nd  Street  - 
Ste  214,  Cedar  Rapids,  IA 
52401. 


Programmer/Analyst:  Analyze, 
design,  develop,  test,  implement 
and  maintain  customized  soft¬ 
ware  applications  in  a  client/ 
server  or  mainframe  environ¬ 
ment.  Will  also  provide  in-depth 
trouble  shooting  and  problem 
solving  as  well  as  analysis, 
design,  development  and  imple¬ 
mentation  assistance  to  AS/400 
programmers,  system  adminis¬ 
trators,  operators  and  end 
users.  Must  have  Bachelors  or 
equivalent  in  CS/MIS/Engineer- 
ing/Math  or  related.  Must  have  2 
yrs  exp.  in  job  offered  or  2  yrs 
exp.  in  software  development. 
Such  experience  must  include 
AS400  and  related  tools.  Must 
be  willing  to  be  assigned  to 
unanticipated  client  sites 
throughout  the  United  States. 
Salary:  $75,000/yr.  Hrs:  8:00am- 
5:00pm,  40/wk.  Please  send  2 
copies  of  resume  to:  Case 
#200201344,  Labor  Exchange 
Office,  19  Staniford  St.,  1st  Fl„ 
Boston,  MA  02114. 


SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op,  configure  and  customize 
computer  software  for  various 
business  applications  using  Sie- 
bel,  SQL  Server,  Siebel  Scripts, 
Siebel  VB,  Siebel  Sales  Enter¬ 
prise  and  EIM  on  Windows  plat¬ 
form.  Require:  Bachelors  degree 
(or  equivalent)  in  Computer 
Science/Engineering,  Business 
Administration,  or  a  closely  relat¬ 
ed  field  with  two  years  of  experi¬ 
ence  in  the  job  offered;  Each 
three  years  of  progressively  re¬ 
sponsible  work  experience  in  the 
field  will  be  considered  equivalent 
to  one  year  of  college  education. 
Competitive  salary  offered.  Apply 
by  resume  to:  Ken  Boatman, 
RMIC,  190  Oak  Plaza  Blvd., 
Winston-Salem,  NC  27105;  Attn: 
Job  SV. 


NETWORK  ENGINEER  to 
design,  configure,  test  and 
maintain  local  and  wide  area 
networks  under  Windows 
NT/2000  and  Linux  operating 
systems;  Plan,  install  and  sup¬ 
port  servers,  routers,  switches, 
data  and  voice  communication 
lines,  network  operating  sys¬ 
tems,  and  other  network  related 
technology,  including  Cisco 
routers/switches,  TCP/IP,  setup 
and  DNS  configuration;  Maintain 
routers  and  switches,  optimize 
traffic  patterns,  and  use  traffic  fil¬ 
tering  to  maximize  bandwidth; 
Monitor  systems  performance 
and  perform  capacity  planning; 
Test,  research  and  recommend 
products;  Support  and  monitor 
online  transaction  systems. 
Require:  B.S.  degree  in 

Computer  Science/Engineering, 
or  a  closely  related  field  with 
two  years  of  experience  in  the 
job  offered;  A  M.S.  degree  with  a 
demonstrated  ability  to  perform 
the  stated  duties  gained  through 
academic  coursework/previous 
work  experience  will  be  accept¬ 
ed  in  lieu  of  the  B.S.  degree  and 
two  years  of  experience. 
Extensive  travel  on  assignment 
to  various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Send  resume  to: 
Renga  Nathan,  Bridium,  Inc., 
1900  Emery  St„  Suite  200, 
Atlanta,  GA  30318;  Attn:  Job 
MV. 


Programmer  Analyst,  Brunswick, 
ME,  analyze,  design,  write,  imple¬ 
ment,  customize  BaaN  business 
applications;  resolve  problems  and 
work  with  BaaN  support  on  patch 
resolution;  develop  program  speci¬ 
fication  packages,  business  re¬ 
quirements  and  test  scripts;  con¬ 
duct  design  and  programming  in 
BaaN  tools  and  Seagate  informa¬ 
tion;  develop  E-Commerce,  BaaN 
front  office;  re-engineer  business 
processes;  conduct  user  training 
and  technical  support;  prepare  user 
and  technical  documents;  use  Win¬ 
dows  NT,  BaaNB  4C3,  BaaN  tools, 
DEM,  Report  Writer  tool,  BaaN  dis¬ 
tribution  and  manufacturing  mod¬ 
ules  (sales  order  processing,  order 
acknowledgement,  pick/pack  oper¬ 
ations,  shipping,  inventory  and 
engineering  data  management), 
and  MRP/MPS;  must  have  experi¬ 
ence  with  barcoding  application  to 
BaaN,  integration  of  third  party 
packages  to  BaaN  and  conversion 
from  legacy-BaaN,  life  cycle  imple¬ 
mentation  with  at  least  one  year 
post  implementation  support.  And 
BaaN  certification  in  logistics  and 
CPIM,  and  four  years  experience  in 
BaaN  distribution  and  manufactur¬ 
ing  modules.  Bach.  Deg  in  Indust  or 
Elect  Engineering,  plus  5  yrs  exp, 
Mon-Fri,  9am  -  5pm  40hrs  wk, 
$105,500  per  yr.  send  res  to 
Bureau  of  Labor  Standards,  45 
State  House  Station,  Augusta, 
Maine  04333-0045,  ref  to  Job 
Order  #35668  for  Programmer 
Analyst. 


Programmer/Analyst:  Analyze, 
design,  develop,  test,  implement 
and  maintain  customized  soft¬ 
ware  applications  in  a  client/ 
server  or  mainframe  environ¬ 
ment.  Will  also  provide  in-depth 
trouble  shooting  and  problem 
solving  as  well  as  analysis, 
design,  development  and  imple¬ 
mentation  assistance  to  AS/400 
programmers,  system  adminis¬ 
trators,  operators  and  end 
users.  Will  utilize  AS400,  RPG 
III,  RPG/400,  CL/400  and  JD 
Edwards  in  a  mainframe  envi¬ 
ronment.  Must  have  Bachelor's 
degree  or  equivalent  in  CS / 
Engineering/Math  or  related  2 
yrs  exp.  in  job  offered  or  2  yrs 
exp.  in  software  development. 
Such  experience  must  include 
JD  Edwards  and  AS/400  tool 
set.  Must  be  willing  to  be 
assigned  to  unanticipated  client 
sites  throughout  the  United 
States.  Salary:  $78,000.00/yr. 

Please  send  2  copies  of  resume 
to:  Case  #  200201453,  Labor 
Exchange  Office,  19  Staniford 
St„  1st  FL,  Boston,  MA  02114. 
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Positions  are  available  for  a 
Senior  Business  Analysts, 
Consulting  -  Grad  in  Atlanta, 
Georgia  with  a  technology  solu¬ 
tions  company.  The  company 
architects  and  designs  next  gen¬ 
eration  software  for  point-of-sale 
and  Internet  systems  in  the  retail 
industry  including  entertainment, 
petroleum  with  convenience  or 
food  stores,  and  restaurants. 

The  Senior  Business  Analyst, 
Consulting  -  Grad  is  primarily 
responsible  for  providing  con¬ 
sulting  services  to  define  best 
operational  practices  for  the 
implementation  of  complex  soft¬ 
ware  applications  for  Radiant 
clients. 

Candidates  for  these  positions 
should  possess  a  Master's 
degree  in  Business  Admini¬ 
stration  or  a  computer  field  one 
year's  experience  in  retail,  tech¬ 
nology  consulting,  or  business 
operations  including  finance, 
accounting,  or  general  manage¬ 
ment;  team  leadership  or  project 
management;  and  one  of  the  fol¬ 
lowing:  technology  implementa¬ 
tion,  application  programming, 
systems  analysis  and  manage¬ 
ment,  or  business  process 
analysis  and  re-engineering. 
Reference  Job  Code  #020/33 

Apply  with  resume  by  mail  to: 
Vickie  Olsen,  Radiant  Systems, 
Inc.,  3925  Brookside  Parkway, 
Alpharetta,  Georgia  30022 


Mahantech  Corp.,  an  innova¬ 
tive  software  development  & 
implementation  co.  has  open¬ 
ings  for  IT  professionals  with 
industry  exp.  using  IDMS/ 
ADSO,  VIA/Alliance,  CCCA, 
ABAP/4,  SAP/R3,  SAP  ITS, 
SAP  Web.  We  offer  competitive 
pay  &  benefits.  Foreign  educ. 
equiv.  accepted.  Travel/reloca¬ 
tion  reqd.  Please  send 
resumes  only  to  HR,  4803 
MacCorkle  Ave.,  S.E., 
Charleston,  WV  25304  or 
email:  admin@mahantech.com 
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Knowledge  You  Need 

Track  changing  market  conditions,  follow  the  latest  news  and 
develop  strategies  for  deploying  new  technology. 


No  matter  what  you're  looking  for,  you're 
sure  to  find  it  in  one  of  our  16  online 
Knowledge  Centers.  Each  self-contained 
virtual  library  contains  a  complete 
collection  of  topically  based  resources  on  a 
specific  subject — from  storage  to  IT 
management  to  ROI.  With  a  wealth  of 
aggregated  information,  these  easy-to- 
navigate  Knowledge  Centers  are  a  single 


point  of  access  to  all  of  the  information  you 
need  to  support  important  business  and 
purchase  decisions: 

•  Up-to-the-minute  news 

•  Special  reports 

•  White  papers 

•  Research  and  analysis 

•  Vendor  listings 

•  Event  and  training  information 
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PeopleSoft 

When  Vail  Resorts  upgrad¬ 
ed  to  Version  8.1  of  People- 
Soft’s  human  resources,  pay¬ 
roll  and  other  employee- 
related  applications  two 
years  ago,  some  of  the  soft¬ 
ware  required  monthly  patch 
downloads,  Silvera  said.  At 
times,  patch  management  be¬ 
came  “a  maintenance  night¬ 
mare,”  she  added.  Since  then, 
Silvera  has  worked  with  Peo¬ 
pleSoft  to  address  the  patch 
issues  and  said  she  has  seen 
“a  concerted  effort  to  in¬ 


crease  quality  assurance.” 

The  idea  of  streamlining 
the  software  upgrade  process 
is  also  of  interest  to  George 
Muller,  CIO  at  Imperial  Sugar 
Co.  in  Sugar  Land,  Texas.  The 
sugar  maker  runs  a  mix  of 
PeopleSoft  7  and  8  ERP  appli¬ 
cations,  and  Muller  said  any 
technology  that  can  reduce 
costs  and  time-consuming 
procedures  for  his  IT  staff 
“definitely  gets  me  excited.” 

But  Joshua  Greenbaum,  an 
analyst  at  Enterprise  Appli¬ 
cations  Consulting  in  Daly 
City,  Calif.,  said  PeopleSoft 
needs  to  prove  that  it  can 
back  up  its  lofty  rhetoric. 

“PeopleSoft’s  customer  ini¬ 
tiative  looks  good  on  paper, 
but  we  need  more  substance 
to  truly  evaluate  its  potential 
impact,”  he  said.  “The  indus¬ 
try  standard  for  solving  these 
problems  largely  consists  of 
talk  and  no  action,  so  if  Peo¬ 
pleSoft  can  set  a  new  stan¬ 
dard,  all  power  to  them.” 

Rick  Bergquist,  People¬ 
Soft’s  chief  technology  offi¬ 
cer,  said  the  company  plans 
to  build  packaged  connectors 
into  its  applications  so  users 
can  more  easily  connect 
them  to  software  from  rival 
vendors  like  SAP  AG  and  Or¬ 
acle  Corp.  For  example,  he 
said,  the  next  release  of  Peo- 


PeopleSoft  Maps  Out  Linux  Strategy 


PeopleSoft  also  announced  at 
last  week’s  conference  that  it 
plans  to  make  all  170  of  its  ap¬ 
plications  available  on  Red  Hat 
Inc.'s  version  of  Linux,  starting 
in  the  fourth  quarter. 

David  Sayed,  technology 
product  marketing  manager  at 
PeopleSoft,  said  the  move  was 
prompted  by  an  increased  inter¬ 
est  among  IT  managers  in  using 
Linux  beyond  basic  file  and  Web 
servers.  “Now,  customers  are 
telling  us  they  want  to  run  enter¬ 
prise  applications  [on  Linux- 
based  systems],”  he  said. 

PeopleSoft  anointed  IBM’s 
Intel-based  servers,  DB2  data¬ 
base  and  WebSphere  applica¬ 


tion  server  software  as  its  pri¬ 
mary  development  platforms  for 
:  the  open-source  operating  sys- 
:  tern.  But  the  software  vendor 
;  said  it  will  also  support  its  appli- 
:  cations  on  other  servers  that 
run  Red  Hat  Advanced  Server. 

Like  other  application  ven- 
:  dors,  PeopleSoft  is  recognizing 
■  “the  competitive  aspect  of  hav¬ 
ing  a  Linux  solution,"  said 
:  Stacey  Quandt,  an  analyst  at 
:  Forrester  Research  Inc.  in  Cam- 
bridge,  Mass.  “There’s  obvious 
:  demand  in  the  market.” 

George  Muller,  CIO  at  Imperi- 
:  al  Sugar,  said  Linux  support 
•  may  be  of  some  interest  to  him 
I  down  the  line.  But  the  sugar 


maker  currently  runs  its  systems 
almost  exclusively  on  Windows, 
and  Muller  said  he  plans  to  get 
the  most  out  of  his  investments 
in  Microsoft  Corp.’s  technology 
for  the  next  several  years. 

A  similar  situation  prevails  at 
Vail  Resorts  Management.  Vicki 
Silvera,  the  company’s  director 
of  information  systems,  said 
Linux  is  starting  to  catch  her  at¬ 
tention. 

But  Vail  Resorts  is  a  Micro¬ 
soft  shop  that  relies  on  Win¬ 
dows  and  SQL  Server  databas¬ 
es.  “Only  time  can  tell  if  there  is 
an  opportunity  or  advantage  for 
the  company  [with  Linux],"  said 
Silvera. 

-MarcL  Songini 
and  Todd  R.  Weiss 


pleSoft’s  supplier  relation¬ 
ship  management  module, 
due  later  this  year,  will  sup¬ 
port  out-of-the-box  integra¬ 
tion  with  SAP  applications. 

Bergquist  called  People¬ 
Soft’s  plan  “the  beginning  of 
the  end  of  middleware.”  An¬ 
other  PeopleSoft  executive 
said  the  built-in  connectors 
will  require  less  work  on  the 
part  of  IT  managers  than  the 
AppConnect  integration 
tools  that  the  company  an¬ 


nounced  last  August. 

But  AppConnect  will  con¬ 
tinue  to  play  a  major  role  in 
enabling  the  promised  inte¬ 
gration  with  rival  applica¬ 
tions,  according  to  People- 
Soft.  And  Bergquist  said  spe¬ 
cialized  connectors  may  be 
needed  to  help  users  inte¬ 
grate  PeopleSoft  applications 
with  homegrown  or  heavily 
customized  systems. 

PeopleSoft  is  also  working 
to  embed  diagnostic  tools  in 


its  applications  to  help  IT 
managers  track  software 
patches  and  automatically 
download  newly  issued  ones. 
In  addition,  Conway  claimed 
that  users  will  eventually  be 
able  to  upgrade  their  applica¬ 
tions  with  zero  downtime.  I 


MORE  FROM  LAS  VE6AS 

At  its  own  conference,  Hyperion  Solutions 
unveiled  upgraded  financial  reporting  tools: 
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Mci 

tors  and  vendors.  But  Swan 
said  the  combination  of  low¬ 
er  margins  on  N/MCI  seats 
and  deployment  delays  that 
shortened  the  time  EDS  had 
to  generate  revenue  per  seat 
produced  a  loss  that  couldn’t 
match  the  increase  in  the 
number  of  deployed  seats. 

N/MCI  is  a  $6.9  billion  IT 
outsourcing  contract,  often 
referred  to  as  seat  manage¬ 
ment,  that  will  give  the  Navy 
and  Marine  Corps  secure, 
universal  access  to  integrated 
voice,  video  and  data  com¬ 
munications.  Plano,  Texas- 


based  EDS  won  the  contract 
in  October  2000.  However, 
technical  difficulties,  deploy¬ 
ment  delays  and  user  com¬ 
plaints  have  hampered  the 
program  since  its  inception. 

During  the  first  quarter, 
EDS  made  what  Swan  called 
“reasonable  progress”  in  the 
number  of  N/MCI  seat  orders 
received,  but  he  said  the  com¬ 
pany  fell  behind  in  the  num¬ 
ber  of  seats  actually  “cut 
over”  to  N/MCI.  Swan  added 
that  EDS  has  “good  visibility” 
into  second-quarter  orders 
for  seats  but  that  “we  need  to 
accelerate  the  cut-over  seats 
to  a  rate  of  approximately  900 
a  day  and  hold  this  level 
throughout  the  year.” 


More  important  is  the  im¬ 
pact  that  the  N/MCI  loss  has 
had  on  free  cash  flow.  EDS 
now  expects  to  have  $1.9  bil¬ 
lion  in  free  cash  flow,  com¬ 
pared  with  its  prior  estimate 
of  $2.1  billion,  said  Swan. 

While  several  risks  to  the 
N/MCI  contract  remain  — 
such  as  more  deployment  de¬ 
lays,  further  declines  in  aver¬ 
age  seat  price  and  potential 
delays  in  milestone  testing  — 
“we  believe  they  are  manage¬ 
able,”  said  Swan. 

Swan  assured  financial  an¬ 
alysts  that  the  company  is 
taking  steps  to  improve  the 
operating  controls  of  the 
N/MCI  account.  So  far,  EDS 
has  made  improvements  to 


the  cost  estimation  process, 
assigned  additional  financial 
personnel  to  the  contract 
and  made  staff  changes  at  the 
program  management  office. 

EDS  has  also  conducted  a 
detailed  review  of  at  least  a 
dozen  so-called  problem 
contracts,  said  Swan.  “While 
we  continue  to  pursue 
megadeals  as  a  key  element 
of  our  strategy,  we  are  being 
more  selective  in  the  deals 
we  are  looking  at,”  he  noted. 

EDS  CEO  Michael  Jordan 
said  that  during  the  past  sev¬ 
eral  months,  EDS  has  backed 
away  from  contracts  that 
would  put  the  company  in  a 
position  of  too  much  nega¬ 
tive  cash  flow.  “This  is,  in 


fact,  a  cash-generating  busi¬ 
ness,”  said  Jordan.  “We  have 
to  re-establish  the  company’s 
credibility  with  the  financial 
community.”  Details  on 
EDS’s  strategic  transforma¬ 
tion  plan  will  be  released 
next  month. 

When  a  financial  analyst 
asked  if  there  was  a  chance 
that  the  N/MCI  contract 
wouldn’t  be  part  of  EDS’s 
portfolio  in  the  near  future, 
Jordan  responded,  “I  would¬ 
n’t  think  so.”  I 


INTRANET  TROUBLES 

For  more  on  EDS’s  Navy/Marine  Corps 
Intranet  project,  visit  our  Web  site: 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Boom  &  Bust  Blues 


THERE’S  SUPPOSED  TO  BE  PLENTY  of  good  news  to  go 
around  in  the  “2003  IT  Workforce  Survey”  released  last 
week  by  the  Information  Technology  Association  of 
America.  If  you’re  a  CIO  or  corporate  IT  manager,  the 
good  news  is  that  IT  labor  costs  are  stabilizing  and  IT 
shops  are  mostly  able  to  hire  the  people  they  need.  For  IT  workers 
in  the  trenches,  the  good  news  is  that  layoffs  are  slowing,  actual  pay 
cuts  are  largely  a  thing  of  the  past,  and  only  4%  of  corporate  IT 
departments  are  considering  moving  jobs  offshore  in  the  next  year. 
Yeah  —  that’s  what  qualifies  as  good  news  these  days. 


Trouble  is,  the  survey  doesn’t  show  what  lies 
just  beneath  that  feeble  good  news:  Corporate 
IT  morale  is  in  the  toilet.  And  the  No.  1  reason 
is  the  one  thing  you  can’t  do  much  about:  the 
long,  long  hours. 

You  can’t  do  much  about  the  hours  your  peo¬ 
ple  work  because  the  work  has  to  get  done  and 
there’s  no  budget  for  hiring  more  people  to  do 
it.  So  more  and  more  of  our  best  people  are 
coming  to  the  conclusion  that  there’s  a  better 
life  to  be  had  than  grinding  away  in  an  IT  shop. 

And  who  will  you  lose  at  the  first  opportuni¬ 
ty?  Your  smartest,  sharpest  people,  that’s  who. 
Your  IT  shop  leaders.  The  ones  who  best  un¬ 
derstand  the  connection  between  IT  and  busi¬ 
ness.  The  ones  you’ll  need  the  most,  once  you 
get  the  green  light  to  start  building  new  proj¬ 
ects  again. 

They’re  the  ones  who  don’t  have  to  stay  — 
who  can  take  their  corporate  IT  experience  and 
parlay  it  into  a  new  career,  whether  that  means 
conventional  IT  consulting  or  a  new  specialist 
gig  combining  law  and  IT,  medicine  and  IT  or 
some  other  profession  and  IT. 

And  why  should  they  stay?  They’re  smart 
enough  to  understand  that  this  crunch  isn’t  a 
one-time  thing.  We’ve  been  through 
it  before.  First  there’s  an  IT  skills 
shortage:  IT  shops  go  crazy  looking 
for  ways  to  fill  critical  jobs,  and  IT 
becomes  the  hot  place  to  work. 

Then  a  few  years  later  the  business 
tightens  up,  layoffs  mount,  salaries 
fall,  hours  get  long  and  college  stu¬ 
dents  switch  their  majors  to  any¬ 
thing  but  computer  science. 

Which,  a  few  years  later,  results  in 
another  shortage  —  and  the  cycle 
begins  again.  No  wonder  your  best 
people  want  to  leave.  They  love 
their  work,  but  what  sane  person 


would  want  to  build  a  career  on  that  sort  of 
manic-depressive  boom-and-bust  cycle? 

Can  you  keep  them?  Maybe.  Your  best  shot  to 
do  that  may  be  to  get  your  IT  shop  out  of  the 
boom-and-bust  business.  You  can’t  stop  eco¬ 
nomic  cycles  or  change  the  laws  of  supply  and 
demand.  But  you  can  change  the  way  you  orga¬ 
nize  your  shop. 

You’ve  heard  about  cross-functional  teams 
for  years.  Build  a  few.  Bulldoze  some  of  the 
walls  between  different  IT  functions.  You’ve 
got  programmers  and  database  analysts  and 
network  administrators  and  help  desk  special¬ 
ists.  Start  cross-training.  Your  programmers 
don’t  have  to  become  database  experts  or  net¬ 
work  gurus,  but  the  more  they  know  about 
those  other  jobs,  the  better  they  can  create  sys¬ 
tems  that  save  grief  for  the  whole  business. 

Afraid  they’ll  take  the  training  and  run  off  to 
a  better  job?  They  won’t  if  you  invest  in  educat¬ 
ing  them  for  what  your  organization  needs.  For¬ 
get  generic  IT  training  —  put  them  to  work 
studying  your  company’s  business  processes, 
learning  techniques  to  pry  requirements  out  of 
your  users  and  understanding  the  realities  of 
your  corporate  culture. 

That  will  make  them  much  more 
valuable  to  you  —  but  not  especial¬ 
ly  more  attractive  to  another  em¬ 
ployer  who’s  just  looking  for  some¬ 
one  fresh  out  of  XML  class. 

You’ll  get  better,  smarter  work. 
You’ll  get  more  flexibility  and  effi¬ 
ciency  in  your  IT  shop,  and  greater 
focus  on  real  business  value. 

You  may  even  find  that  your 
cross-functional  IT  people  don’t 
have  to  put  in  such  long  hours  to 
get  the  work  done. 

And  for  your  employees,  that 
would  be  really  good  news.  I 
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Details,  Details 

During  a  disaster  recovery  exercise,  database  pilot  fish 
discovers  there’s  a  government  requirement  that  this 
sickness  and  accident  data  be  retained  for  40  years. 
No  problem,  he’s  told,  the  actual  tapes  of  the  old  data 
are  stored  off-site.  “Checking  further,  I  found  the  tapes 
in  question  were  seven-track  tapes,”  fish  says.  “So  I 
asked,  ‘Do  we  have  a  seven-track  tape  drive  to  read 
them  with?’  It  took  only  a  few  weeks  to  locate  and 
renovate  a  drive  to  transfer  them  to  nine-track  tape 
and  microfiche.” 


Faith 

The  update  you 
sent  crashed  the 
servers,  remote 
site  admin  telis 
pilot  fish.  No  problem, 
fish  tells  him;  just  copy 
the  files  that  were 
changed  from  one  of 
your  working  systems  to 
the  failing  one.  I  can’t, 
admin  says  - 1  don’t 
have  any  working  sys¬ 
tems.  “When  he  applied 
that  software  to  the  first 
machine,  it  faited,”  says 
fish.  “So  he  tried  the 
next  machine  and  so  on 
until  he  had  no  more 
working  machines.  He 
kept  thinking  that  the 
next  time  it  might  work." 


How  Small 
Are  They? 

This  company 
is  growing,  but 
its  offices 
aren’t,  says  a  pilot  fish 
whe  works  there.  But 
the  senior  VP  of  IT  has 
answers.  When  a  direc¬ 
tor  complains  new  cubi¬ 
cles  are  so  small  that 
some  employees  have 
trouble  fitting  through 
the  entrances,  VP  sug¬ 
gests  dieting.  Another 
director  adds  that  the 
cubes  are  so  small,  mon¬ 
itors  have  to  be  lifted 
over  the  wall  to  be  in¬ 
stalled.  VPs  answer 
“Start  ordering  smaller 
monitors.’’ 
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Oh,  Didn’t  I 
Mention  That? 

This  police  department 
pilot  fish  sets  up  a  script 
to  send  time  sheets  to 
city  hall  at  noon  three 
days  before  each  pay¬ 
day.  But  the  payroll  clerk 
complains  three  weeks 
in  a  row  that  the  file 
wasn’t  sent.  Fish  can’t 
find  the  problem,  but 
he  notices  the  third 
voice-mail  complaint 
was  left  at  11:43  a.m. 
“She  told  me  that  she 
and  the  chief  decided  the 
time  sheets  should  arrive 
at  10  a.m.,  not  noon,” 
says  fish.  “And  asked  if  I 
would  change  the  time  it 
was  set  to  send.” 


That  Should  Foil 
The  Wily  Hackers 

This  big  company  re¬ 
quires  a  password  for 
sending  data  between 
Unix  servers.  “But  our 
security  group  deter¬ 
mined  that  using  any 
normal  tools  to  facilitate 
the  transfer  was  a  secu¬ 
rity  risk,”  says  IT  pilot 
fish.  The  solution? 
Home-brew  security  au¬ 
tomation.  “Now  hun¬ 
dreds  of  text  files  con¬ 
taining  the  unencrypted 
password  are  scattered 
across  the  network,” 
fish  sighs.  “And  it  makes 
password  changes  an 
ali-day  affair.  Talk  about 
job  security!” 


OFEED  THE  SHARK!  Send  your  true  tale  of  IT  life  to 
sharky@computerworid.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  and  sign  up  for  Shark  Tank  home  delivery 
at  computerworld.com/sharky. 
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Sony  StorStation™  family  of  network-attached 
storage  solutions  brings  backup  efficiency  and 
consolidation  to  organizations  of  any  size. 


Many  organizations  are  finding  that  tape  backup  systems 
installed  years  ago  can't  keep  up  with  the  new  business  require¬ 
ments  of  today.  The  problems  range  from  having  older  tape  for¬ 
mats  with  insufficient  capacity  to  dealing  with  collections  of  indi¬ 
vidual  tape  drives  that  require  significant  IT  attention  to  ensure 
that  backups  run  on  schedule.  If  your  backup  tasks  are  growing  out 
of  control,  there's  a  good  chance  that  Sony's  family  of  StorStation 
networked  backup  solutions  can  bring  consolidation  and  efficien¬ 
cy  to  your  backup  processes. 

For  some  organizations,  increasing  backup  operational  efficiency 
can  be  as  simple  as  upgrading  to  higher  capacity  tape  drives,  such 
as  Sony's  Advanced  Intelligent  Tape™  (AIT)  family  of  reliable  data 
protection  solutions.  For  others,  it  may  mean  adding  automation, 
such  as  tape  libraries  that  automatically  manage  media  cassettes 
and  back  up  on  a  scheduled  basis.  But  for  more  and  more  organi¬ 
zations,  increased  efficiency  is  better  achieved  by  adding  dedicat¬ 
ed  network  storage  solutions  to  their  networked  environment  in 
order  to  consolidate  backup  tasks,  ensure  greater  efficiency,  and 
reduce  backup  management  and  maintenance  requirements. 

Network-attached  storage  (NAS)  devices,  such  as  those  in  the 
Sony  StorStation  product  family,  enable  organizations  to  increase 
efficiency  by  consolidating  multiple  backup  devices  or  disk  stor¬ 
age  devices  onto  existing  Ethernet  networks.  NAS  devices  act  as 
centralized  backup  coordinators  that  can  be  configured  in  a  num¬ 
ber  of  ways  to  suit  many  business  requirements.  In  the  simplest 
configuration,  a  NAS  server  provides  shared  files  or  shared  net¬ 
work  storage  for  multiple  servers.  With  the  proper  integrated  soft¬ 
ware,  NAS  file  servers  can  act  as  networked  caching  devices,  pro¬ 
viding  speedy  access  to  frequently  used  data.  And  for  organiza¬ 
tions  with  a  range  of  network  backup  or  archival  requirements,  a 
NAS  backup  server  can  route  data  to  an  attached  tape  library, 
enabling  organizations  to  keep  up  with  increasing  backup 
demands  by  merely  adding  additional  or  higher  capacity  tape 
drives.  Combining  a  NAS  device  with  one  or  more  tape  libraries 
brings  increased  data  protection  and  offers  a  cost-effective  solu¬ 
tion  for  long-term  near-line  or  offline  storage. 

In  addition  to  increased  efficiency  and  consolidation,  automated 
networked  backup  solutions  can  ensure  backups  are  performed  on 
schedule,  with  limited  or  no  human  intervention.  The  combination 
of  a  NAS  server  and  a  tape  library  is  a  particularly  good  solution 
for  scenarios  such  as: 

•  Centralized  backup  for  remote  locations  or  branch  offices  that 
lack  on-site  IT  support; 

•  Businesses  that  have  outgrown  their  existing  tape  capacities; 

•  Cost-effective  disaster  recovery  for  businesses  that  have 
many  store  locations,  such  as  retailers;  and 

•  Departments  with  multiple  servers  and  growing  data  require¬ 
ments. 

In  the  past,  it  has  been  cost-prohibitive  or  too  complex  for  many 
organizations  to  deploy  networked  devices  to  address  such  scenarios, 
but  Sony's  family  of  networked  backup  solutions  changes  the  cost 
equation.  Sony  offers  two  types  of  NAS  solutions:  Sony  StorStation™ 
Backup  Servers  and  Sony  StorStation™  NAS  File  Servers. 

Sony's  StorStation™  Backup  Servers  combine  Sony's  high-per¬ 


formance  Advanced  Intelligent  Tape  (AIT)  library  with  a  NAS  file 
server  and  a  leading  pre-integrated  backup  management  software 
solution.  The  "NAS  head”  provides  network  connectivity  and  back¬ 
up  management,  while  the  StorStation™  AIT  library  provides  the 
backup  capacity,  automation  and  media  handling.  For  environments 
with  growing  data  protection  and  archival  requirements  across  mul¬ 
tiple  application,  database  or  production  systems,  the  StorStation™ 
Backup  Server  solution  provides  a  single  point  for  backup  consoli¬ 
dation.  Moving  from  a  server-attached  backup  strategy  to  a  net- 
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Consolidation 


Challenges 

•  Drive  or  library  attached  directly  to  server 

•  Each  system's  backup  must  be  handled  separately 

•  As  the  number  of  systems  grows,  backup 
management  becomes  cumbersome  and  difficult 


worked  solution  brings  cost  and  efficiency  benefits  by  eliminating 
the  duplicate  resources,  efforts  and  equipment  required  to  back  up 
individual  servers  separately.  As  the  number  of  servers  or  the 
amount  of  data  generated  grows,  the  cost-benefits  of  a  networked 
backup  approach  increase. 

The  Sony  StorStation™  Backup  Server,  when  used  with  a  Sony 
tape  library,  is  ideal  not  only  for  consolidating  backups  on-site, 
but  also  as  a  component  of  an  overall  backup  strategy  for  compa¬ 
nies  needing  to  back  up  or  archive  data  from  satellite  or  branch 
offices.  The  StorStation™  Backup  Server,  when  used  with  a  Sony 
tape  library,  delivers  the  capability  needed  to  achieve  an  unat¬ 
tended  backup  of  several  days  or  even  several  weeks,  depending 
on  the  amount  of  data  to  be  protected.  In  addition,  it  can  be  man¬ 
aged  remotely  simply  by  connecting  it  to  the  headquarters  office 


via  a  wide-area  network. 

Sony's  StorStation™  NAS  File  Servers  provide  a  low-cost  solu¬ 
tion  for  data  storage  consolidation,  file  serving  and  file  sharing 
capabilities  for  small  and  midsize  businesses  and  enterprise 
departments.  Sony  StorStation™  NAS  servers  are  an  ideal  com¬ 
plement  to  Sony  AIT  tape  libraries.  For  organizations  with  a  range 
of  file  sharing  or  network  storage  requirements,  Sony  provides 
NAS  server  configurations  that  provide  330  GB  to  720  GB  of  net¬ 
worked  storage. 

For  ease  of  use  and  flexible  access,  Sony  file  servers  feature 
browser-based  management  and  file  sharing  support  for 
Windows®,  Unix®,  Linux®,  Novell®  and  Macintosh®  operating 
systems.  Data  protection  is  achieved  by  RAID-5,  RAID-1  and  RAID- 
0  options.  For  an  extra  level  of  data  protection  of.  the  consolidated 
data,  Sony  AIT  libraries  can  be  combined  with  the  StorStation  file 


Backup  Consolidation 

Backup  appliance  sits 
on  the  network 
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Benefits: 

•  Automated  and  streamlined 
backup  management 

•  More  manageable  growth 
and  scalability 

•  Turnkey  solution  with 
pre-packaged  backup 
management  software 


Network  Storage  Consolidation  Benefits: 

•  File  sharing 

•  Storage  consolidation 

•  Centralized  management  and  growth 


servers  via  a  SCSI  port.  Connectivity  into  industry-standard  net¬ 
works  is  provided  by  Gigabit  Ethernet  or  dual  10/100  Ethernet  ports. 

Sony's  StorStation™  NAS  backup  servers  and  file  servers  inte¬ 
grate  the  best  of. high-end  enterprise  storage  functionality  into 
solutions  that  are  affordable,  easy  to  use  and  easy  to  manage. 
Whether  for  remote  office,  workgroup  or  data  center  deployments, 
all  StorStation™  NAS  devices  are  compact,  1U  high,  rack-mount¬ 
able  units  designed  to  fit  neatly  into  areas  where  space  is  limited. 

If  your  business  is  struggling  to  manage  multiple  tape  drives 
spread  across  your  network,  or  if  you  need  to  consolidate  your  data 
and  make  it  easily  accessible  to  your  networked  clients,  the  time  is 
right  for  Sony’s  Network  Solutions — the  smart  investment. 

©  2003  Sony  Electronics,  Inc.  All  rights  reserved.  Sony,  Advanced  Intelligent 
Tape  and  StorStation  are  trademarks  of  Sony.  All  other  trademarks  are  properties 
of  their  respective  owners. 


Learn  More  About 


Sony  StorStation  Solutions 


Download  the  free  white  paper,  "Networked  Backup*: 
The  Path  to  Greater  Efficiency  and  Consolidation."  ;  • 
Visit  www.nwfusion.com/sony/NASCW 
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Electronic  Arts  Stays  Real  for  1 00,000 

Sims  Online  Players  with  Oracle 


ELECTRONIC  ARTS’" 


It's  a  real  bummer  when  100,000  online  gamers  can't 
get  to  their  game.  That's  why  EA  chose  OracleS/  to 
run  Sims  Online.  What  do  you  run? 


oracle.com/start 
keyword:  ea 
or  call  1.800.633.1072 
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